Static task
static1
Behavioral task
behavioral1
Sample
fbbd9af561fa56a199174ebb88585b59_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fbbd9af561fa56a199174ebb88585b59_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbbd9af561fa56a199174ebb88585b59_JaffaCakes118
-
Size
31KB
-
MD5
fbbd9af561fa56a199174ebb88585b59
-
SHA1
b9dba1acecca42bf8e92ca9e132d54970865693d
-
SHA256
0f34c16917e10c85fa151e2e0e2219b8d26a8c8d38679e4ba90e42a2a48dc6ad
-
SHA512
583024b13dccb50a0a38f1efa102cd75240eb8f49c19008fcd6df73c73aefb4dab9e3f9bb866df04587fd80bba92fd74c27a1ac19d60ee34f56a6eea396b2b27
-
SSDEEP
768:Jk2bGTteqITCo121YuEEsePY+Pr7Ksge:K2STzyk1nslEr7Kf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbbd9af561fa56a199174ebb88585b59_JaffaCakes118
Files
-
fbbd9af561fa56a199174ebb88585b59_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d92bd4db0059e3c7c44f767d9b273b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AbortSystemShutdownA
SetTokenInformation
GetTokenInformation
kernel32
UnmapViewOfFile
user32
VkKeyScanExW
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ