Static task
static1
Behavioral task
behavioral1
Sample
fd110392141171858434c94c936078b3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd110392141171858434c94c936078b3_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd110392141171858434c94c936078b3_JaffaCakes118
-
Size
118KB
-
MD5
fd110392141171858434c94c936078b3
-
SHA1
7b34d144e526569aefa270b86c8120145dea2d44
-
SHA256
1d4225d89a89920a9adbde417145922c0c2710b366cb1be6d05de90b1fa71efa
-
SHA512
0287446336be1d23ee8e8dc614d332aa47b8523f927e913981e7ce63bb56dd52e1d9c360396d4fc597f9c68be2ee9810899fb82b0ca11d5825ba41d22a618353
-
SSDEEP
3072:DobN5alCWunTBEmXSRDnwvr+JX8YeWDGpoHq4VHsUmIN:DoRb1TBEmXSR7Sravgo3sIN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd110392141171858434c94c936078b3_JaffaCakes118
Files
-
fd110392141171858434c94c936078b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
6e4f3a493af50db0ec4d65a2250605f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
ReadFile
CreateProcessW
GlobalSize
EnumSystemLocalesA
FindClose
VirtualAlloc
GetProcAddress
LoadLibraryA
GetSystemInfo
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
MultiByteToWideChar
GetLocaleInfoA
VirtualProtect
VirtualQuery
InterlockedExchange
RtlUnwind
IsBadWritePtr
HeapReAlloc
HeapAlloc
GetCPInfo
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LCMapStringW
user32
SetScrollInfo
LoadIconW
SetCaretPos
SetWindowPlacement
RealChildWindowFromPoint
GetSubMenu
MapWindowPoints
IsWindowUnicode
HideCaret
GetKeyState
GetWindowTextW
GetScrollPos
RedrawWindow
IsDialogMessageA
wsprintfW
FindWindowW
comdlg32
FindTextW
ole32
StgIsStorageILockBytes
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 83KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ