Static task
static1
Behavioral task
behavioral1
Sample
fc45c5b3d8acc4b3c0944153d3c91cd4_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fc45c5b3d8acc4b3c0944153d3c91cd4_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fc45c5b3d8acc4b3c0944153d3c91cd4_JaffaCakes118
-
Size
58KB
-
MD5
fc45c5b3d8acc4b3c0944153d3c91cd4
-
SHA1
d9bcd7a46020c7a83a25c6c202072c71d4df792b
-
SHA256
0465c42420b2135b0626d2a8a4f5a09efc843a1317ee3565d345c697f1c35418
-
SHA512
ce9954a9b6ad8c06a6d224a60e7c4ac381ede23d16e05639768d7784f2d72d3ce587856845d9d2d2b21b8f80e3f8363709f8fb0afa7a8216d7d971fe88fe4dc3
-
SSDEEP
1536:298h9wHRvBfSJjWZurAX3qeIxylWLfZg6a9wTXkc:68hIv+iZuUKeIS/V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc45c5b3d8acc4b3c0944153d3c91cd4_JaffaCakes118
Files
-
fc45c5b3d8acc4b3c0944153d3c91cd4_JaffaCakes118.exe windows:4 windows x86 arch:x86
d229a23632e1270c838a08a9d7406750
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
FindAtomA
GetFileTime
ExitThread
user32
GetDlgItem
GetWindowTextLengthA
DrawTextW
CopyImage
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 301B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ