Static task
static1
Behavioral task
behavioral1
Sample
fc18638a9f0cc8e57562c841fe0ad474_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fc18638a9f0cc8e57562c841fe0ad474_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fc18638a9f0cc8e57562c841fe0ad474_JaffaCakes118
-
Size
110KB
-
MD5
fc18638a9f0cc8e57562c841fe0ad474
-
SHA1
06283fa59c40c0d0e7dc658b9be6a95590ca7f13
-
SHA256
ff1a0a98cb12b1fdab61c1587e1dd1db86ff9560bcd2eaa530426cec94f02257
-
SHA512
be6c7ce65f888c61e01c760e3cc7837b7eacfdb858d6a004bb651bbd291174a4bd5ed2ee7e0c20d72cedc10e120dc0860386cf80bd6051a204fc084cd568bd8b
-
SSDEEP
1536:6jxzdN6KeDIQJQxBH4qXSc48xHgkcOBSUrclXeVdyXJY8:6jxzH6K+JsdXS78xVJSUrclUyv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc18638a9f0cc8e57562c841fe0ad474_JaffaCakes118
Files
-
fc18638a9f0cc8e57562c841fe0ad474_JaffaCakes118.exe windows:4 windows x86 arch:x86
5d5a507f348c5c3b5ea4e6f16ee24bf3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
AddFontMemResourceEx
GetBrushOrgEx
AddFontResourceA
CreateSolidBrush
GetBitmapBits
CloseFigure
CloseMetaFile
CancelDC
AbortPath
AddFontResourceExW
CopyMetaFileA
GetPixel
DeleteDC
GetClipBox
GetBitmapBits
ExcludeClipRect
GetCurrentPositionEx
AddFontResourceA
AddFontResourceExA
CloseFigure
GetBrushOrgEx
CancelDC
CloseMetaFile
CopyMetaFileA
DeleteObject
RestoreDC
ExtTextOutA
GetPixel
SetTextColor
CreateSolidBrush
BeginPath
GetPixel
BitBlt
ClearBrushAttributes
AddFontResourceTracking
AddFontResourceExW
ExcludeClipRect
GetBrushOrgEx
SetTextColor
AddFontMemResourceEx
ExtTextOutA
AddFontResourceA
CopyMetaFileA
GetPixel
CloseMetaFile
CancelDC
user32
CopyIcon
InsertMenuA
DrawIcon
GetDC
CreateIcon
GetCursor
GetFocus
CloseWindow
GetWindowTextLengthA
AppendMenuW
DialogBoxParamW
BlockInput
CopyImage
GetWindowTextA
DrawTextW
LoadCursorA
EndDialog
AlignRects
DrawTextA
AppendMenuW
GetDlgItem
LoadMenuA
GetDC
IsWindow
GetWindowTextA
DrawIcon
CreateIcon
DialogBoxParamW
AppendMenuA
CopyIcon
GetWindowTextLengthA
EndDialog
IsMenu
AlignRects
DrawIconEx
DialogBoxParamW
DialogBoxParamA
CreateIcon
LoadMenuA
IsWindow
GetWindowTextA
kernel32
GetFileSize
GetStdHandle
FindFirstFileA
CreateDirectoryA
GetConsoleMode
CopyFileA
CopyFileExA
GetFileTime
FindAtomA
GetLastError
CreateThread
GlobalFree
Sleep
GetFileSize
OpenFile
ReadConsoleA
WriteFile
CreateProcessA
GetFileTime
GetCPInfo
GetComputerNameA
DeleteFileW
comctl32
ImageList_DrawIndirect
ImageList_DragEnter
ImageList_Destroy
ImageList_GetImageInfo
ImageList_Draw
ImageList_ReplaceIcon
ImageList_Copy
ImageList_EndDrag
ImageList_LoadImageW
ImageList_LoadImageA
ImageList_Read
ImageList_GetImageRect
ImageList_GetIcon
ImageList_Create
ImageList_DragLeave
ImageList_GetIcon
ImageList_DrawIndirect
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Merge
ImageList_Remove
ImageList_GetDragImage
ImageList_DrawEx
ImageList_BeginDrag
ImageList_AddIcon
ImageList_LoadImage
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ