Static task
static1
Behavioral task
behavioral1
Sample
fd05cc0d8e253531a50767d6242556b2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd05cc0d8e253531a50767d6242556b2_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd05cc0d8e253531a50767d6242556b2_JaffaCakes118
-
Size
36KB
-
MD5
fd05cc0d8e253531a50767d6242556b2
-
SHA1
2865b0b6cc67b307a4b1069b60cd9f1627283c7e
-
SHA256
79bd73a9c1f6b8086dfaf553bafbc394bdc0def3cb22b036461b3e082120441a
-
SHA512
14b4a90fa52ba3bfc4cd234c46a5bb0c4ff0bf49ab05ffa7ef9d39f58212c9b9de4e0cb6fe1c36e44fdfdf6fa97043677fb58f04d5bb5349ec4fd8160717558a
-
SSDEEP
768:AYgJtquwWQEiGSaAb+gfrik9BKuBKr6dGzmH37DC5zaFbJuzberN:IwW9orik9BLBy1E7D6zq0erN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd05cc0d8e253531a50767d6242556b2_JaffaCakes118
Files
-
fd05cc0d8e253531a50767d6242556b2_JaffaCakes118.exe windows:5 windows x86 arch:x86
8028c5aad83a3ca37707aaf8135ec4fb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
?terminate@@YAXXZ
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_XcptFilter
_exit
_cexit
__getmainargs
_ismbblead
kernel32
HeapAlloc
HeapCreate
LoadResource
RtlUnwind
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
FindResourceA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
user32
GetDesktopWindow
GetWindowContextHelpId
GetAsyncKeyState
IsZoomed
GetWindowLongA
GetCaretBlinkTime
shlwapi
PathMatchSpecA
StrIsIntlEqualA
StrToIntA
PathIsDirectoryA
gdi32
GetDeviceCaps
GetTextAlign
GetColorSpace
GetTextColor
ole32
OleFlushClipboard
OleDestroyMenuDescriptor
OleInitialize
OleDuplicateData
d3d8
Direct3DCreate8
shell32
DuplicateIcon
ord162
ord64
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ