Static task
static1
Behavioral task
behavioral1
Sample
fd3e1fba60025c3395a48c4d3bc6de85_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fd3e1fba60025c3395a48c4d3bc6de85_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fd3e1fba60025c3395a48c4d3bc6de85_JaffaCakes118
-
Size
46KB
-
MD5
fd3e1fba60025c3395a48c4d3bc6de85
-
SHA1
f86d681d267f508f3cbc0d96acef6fe3c08c5b2f
-
SHA256
c0a3840dd4a8baacb24051a4d11dadc2910c7cfba66d0ea48585a2e6a7e91c95
-
SHA512
889f7852fa7037a1921b3e658bbca60546741ebd26ee1026035c707641820df8e54de08d4a7049c1c16b3ba8fc7b45427228fa1aa956e85640ea301abe5ecfa1
-
SSDEEP
768:ICQRHXYSsVTRg1c8ZD8EdFmLI8bJHthC0l7JURsaePgQXzAbBrjivet0xT+fd:IC0H0Vtgu89RdF0JURsaeCbBivet0h+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd3e1fba60025c3395a48c4d3bc6de85_JaffaCakes118
Files
-
fd3e1fba60025c3395a48c4d3bc6de85_JaffaCakes118.exe windows:5 windows x86 arch:x86
7191e7462d739849b96d6b8cc7a66e63
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClipboardData
PeekMessageA
GetDlgItemTextA
CloseDesktop
CloseWindowStation
DispatchMessageW
GetKeyState
FindWindowExW
GetDlgItem
SetThreadDesktop
PeekMessageW
GetWindowThreadProcessId
OpenWindowStationA
GetCursorPos
SendMessageW
EndDialog
GetWindowTextW
GetMessageW
GetDlgItemTextW
LoadCursorW
DrawIcon
SetProcessWindowStation
GetKeyboardState
CharLowerBuffA
ToUnicode
GetIconInfo
ExitWindowsEx
GetMessageA
GetWindowLongW
GetForegroundWindow
OpenDesktopA
GetClassNameW
MsgWaitForMultipleObjects
kernel32
IsBadReadPtr
GetVersionExW
CopyFileW
MultiByteToWideChar
DeleteFileW
CreateThread
SetThreadPriority
GetUserDefaultUILanguage
GetTickCount
GetTimeZoneInformation
GetProcessTimes
UnmapViewOfFile
SetFileTime
lstrcmpiA
GetModuleFileNameW
ResetEvent
SetFilePointer
WideCharToMultiByte
GetSystemTime
ExpandEnvironmentStringsW
GetComputerNameW
GetCurrentThreadId
lstrlenW
HeapAlloc
CreateEventW
lstrcpyW
GetProcessHeap
GetTempPathW
CreateFileW
lstrlenA
EnterCriticalSection
GetCommandLineA
MoveFileExW
HeapReAlloc
GetFileSizeEx
OpenMutexW
ReleaseMutex
GetThreadPriority
GetTempFileNameW
SetEndOfFile
GetFileTime
WriteProcessMemory
GlobalUnlock
LeaveCriticalSection
Sleep
SystemTimeToFileTime
SetFileAttributesW
CreateProcessW
GetModuleHandleA
GetExitCodeProcess
lstrcatW
CreateDirectoryW
WaitForSingleObject
CreateMutexW
CreateFileMappingW
GetLogicalDrives
GetLocalTime
FindResourceW
Sections
.rih Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.baduf Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ehonab Size: 7KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ