Static task
static1
Behavioral task
behavioral1
Sample
fbaac00aa815c62ea947fbe5b73ed3df_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fbaac00aa815c62ea947fbe5b73ed3df_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbaac00aa815c62ea947fbe5b73ed3df_JaffaCakes118
-
Size
104KB
-
MD5
fbaac00aa815c62ea947fbe5b73ed3df
-
SHA1
4d800da3ca2fae425abbcc22d69a85b6fd94ea50
-
SHA256
ff8a5d2dd4798199e47e03428dc83d3eb3ff1699ad743707be96014f3db79840
-
SHA512
281f617345f07d1bf0043fef40b669e88fd336992f458531ce8321a96845e4177f2b10c715958992644ec40a1243584648c33c5ca9fe0fde41615e33a5bf6f22
-
SSDEEP
1536:xOJqJIYZk60blPziTWXWVomJwfWNSga/PpaGXnNFLM:oJqKYZk60bMy7mG47aXpaKN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbaac00aa815c62ea947fbe5b73ed3df_JaffaCakes118
Files
-
fbaac00aa815c62ea947fbe5b73ed3df_JaffaCakes118.exe windows:4 windows x86 arch:x86
2cf8cfbb7a6a81fb476fc448d34d6d8d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenFile
DeleteFileW
GlobalFree
CreateThread
DeleteFileA
CopyFileA
GetStdHandle
GetFileSize
WriteFile
CreateDirectoryA
ExitThread
CopyFileW
FindAtomA
DeleteFileW
CreateProcessA
CopyFileExA
SetLastError
CopyFileA
CreateThread
OpenFile
GetFileSize
GetComputerNameA
GetLastError
GetCommandLineA
DeleteAtom
WriteFile
GetCPInfo
ExitThread
GlobalFree
OpenFileMappingA
ReadFile
FindAtomA
CopyFileExA
CreateDirectoryA
Sleep
CopyFileExW
GetLastError
GetComputerNameA
GetCPInfo
DeleteFileW
GetFileTime
CreateProcessA
OpenFileMappingA
OpenFile
CopyFileW
ReadConsoleA
CreateDirectoryA
CopyFileA
ReadFile
DeleteFileA
CreateProcessA
CopyFileW
GetConsoleMode
GetCPInfo
GetCommandLineA
CopyFileExW
DeleteFileW
GetLastError
FindFirstFileA
GlobalFree
user32
GetWindowTextA
DialogBoxParamW
LoadCursorA
GetDC
CopyIcon
EndDialog
GetFocus
CloseWindow
DrawIcon
GetWindowTextLengthA
advapi32
RegReplaceKeyA
RegEnumKeyExA
RegReplaceKeyW
RegQueryInfoKeyW
RegEnumKeyA
RegDeleteKeyW
RegOpenKeyExW
RegDeleteValueA
RegEnumKeyW
RegQueryValueA
RegQueryValueExA
RegQueryValueExW
RegQueryInfoKeyA
RegOpenKeyW
RegOpenKeyA
RegCreateKeyExA
RegFlushKey
RegOpenKeyExA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nqdata Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdata Size: 4KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ