Static task
static1
Behavioral task
behavioral1
Sample
fbe6ceee2b520d1913328ed889ac0c65_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fbe6ceee2b520d1913328ed889ac0c65_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbe6ceee2b520d1913328ed889ac0c65_JaffaCakes118
-
Size
96KB
-
MD5
fbe6ceee2b520d1913328ed889ac0c65
-
SHA1
a8f78cd124bcc49c34a0d86b20632f35d75e7acc
-
SHA256
80f46fba41bb8f02c40ac0c5d62d03984c4a75e21bfe1e7332b8fb18f0386d78
-
SHA512
08dfeab594c6b5388546847d356ed6d18cb525e491ea9d7cb20565675bdf1d5b7c9f28b0ce9769d25c9da9bc12b7a702d3d89f150518ae925c90c5ec8af33b4a
-
SSDEEP
1536:JOKQ3oabLN/J/r8i02qxZZ+fYui8J6WtWW1ZdVhB:EFosB/r8ilqxZZ+fYug+F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbe6ceee2b520d1913328ed889ac0c65_JaffaCakes118
Files
-
fbe6ceee2b520d1913328ed889ac0c65_JaffaCakes118.exe windows:4 windows x86 arch:x86
f113e371a8b49c052937e4f9f9005903
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
lstrcatA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetStringTypeW
user32
GetDlgItemTextA
CharLowerA
wsprintfA
EndDialog
GetWindowRect
GetClientRect
SetWindowPos
SetDlgItemTextA
PostQuitMessage
DialogBoxParamA
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ