Static task
static1
Behavioral task
behavioral1
Sample
fc5349ee84d524512e9d158ea3c12406_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fc5349ee84d524512e9d158ea3c12406_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fc5349ee84d524512e9d158ea3c12406_JaffaCakes118
-
Size
280KB
-
MD5
fc5349ee84d524512e9d158ea3c12406
-
SHA1
51eb1dcb4d9e335ebb1220d23a1cb85ad5eeae3a
-
SHA256
e0ec5a22a6624e77bc86a8c489c439787902895cb9ada79730b8be5524e06243
-
SHA512
cf0396483ef9850a13e862a68d0e90d5730d787be614423048c1737c6a999af26306aac811eee1a19c4b2053b98b9c8c24651d6796b8a772beb48d1f2be86575
-
SSDEEP
3072:Ih4Hz5voTnAlfWB2nchCHSI9g+i+DB7SrNQ+sC8SrWCykRDPT8Ds:z9hUUKQY8SrxzPT5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc5349ee84d524512e9d158ea3c12406_JaffaCakes118
Files
-
fc5349ee84d524512e9d158ea3c12406_JaffaCakes118.exe windows:4 windows x86 arch:x86
67f9218fdf7dd4159ec035c7eeed5536
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageA
TranslateMessage
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
ShowCursor
FindWindowA
GetSystemMetrics
SendMessageA
DefWindowProcA
SetTimer
EndDialog
BeginPaint
EndPaint
GetWindowRect
SetWindowPos
GetDlgItem
SetWindowTextA
LoadBitmapA
GetDlgItemInt
GetDC
ReleaseDC
DestroyWindow
PostQuitMessage
DispatchMessageA
DialogBoxParamA
gdi32
SetTextColor
GetTextMetricsA
SetBkColor
GetStockObject
TextOutA
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
DeleteObject
advapi32
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
kernel32
GetCurrentProcess
TerminateProcess
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetLastError
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
CloseHandle
UnhandledExceptionFilter
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetStdHandle
FreeEnvironmentStringsW
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
SetHandleCount
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 248KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ifc Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE