Static task
static1
Behavioral task
behavioral1
Sample
fbdc5eb96d45da42d8d9e7b8245c0212_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fbdc5eb96d45da42d8d9e7b8245c0212_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbdc5eb96d45da42d8d9e7b8245c0212_JaffaCakes118
-
Size
58KB
-
MD5
fbdc5eb96d45da42d8d9e7b8245c0212
-
SHA1
31fecef520a1a172ea25837f92a8726c2033983a
-
SHA256
009a687de558bd620c41fe03e02af0c86ba31937e27d4a1c53f1374887d65754
-
SHA512
506eaf6c39197fe15e0107ec1d9d52a2f839b1da79d2719a371c58ad6bca70a1b242d00d84f3787df516480f4d090cb29ac2f68b5a29b3b33298f42e4617589c
-
SSDEEP
1536:fDUfTOUlBfNvgwPy+j96K8/ki50V0OkaSkc:wfTOU+6ZZmB0Vjtr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbdc5eb96d45da42d8d9e7b8245c0212_JaffaCakes118
Files
-
fbdc5eb96d45da42d8d9e7b8245c0212_JaffaCakes118.exe windows:4 windows x86 arch:x86
a8e013f07ed38c95db6e0954e42b95d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
DeleteFileA
DeleteFileW
GetStdHandle
user32
IsMenu
GetDlgItem
CreateIcon
IsWindow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 266B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ