Static task
static1
Behavioral task
behavioral1
Sample
fdfdb5a26a57f5e47a4113916893911e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fdfdb5a26a57f5e47a4113916893911e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fdfdb5a26a57f5e47a4113916893911e_JaffaCakes118
-
Size
9KB
-
MD5
fdfdb5a26a57f5e47a4113916893911e
-
SHA1
6ac5a0b8a8cc41ef9f21e92cff8b946425dbc78a
-
SHA256
93599af6c0f89e8935a14f1fddb404788583ab91f85469d19f06a53fad40a36b
-
SHA512
8d21c8ce6708dd44465e8b7a9e7a39b234986d5605242c983fbda2bb0a617be442ad6105e7ba902037d3010a42df27ad21c7065a264e135becff69f923ddb851
-
SSDEEP
192:KYP9pZUBxTLTPIYYnf4KK0rb5NUN7P9HP1oybqYc:7pZUBlTQFVbG9v15t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdfdb5a26a57f5e47a4113916893911e_JaffaCakes118
Files
-
fdfdb5a26a57f5e47a4113916893911e_JaffaCakes118.exe windows:4 windows x86 arch:x86
363a9966e7169c796a65a80db8c488b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
malloc
memset
wcslen
wcscpy
realloc
memcpy
_except_handler3
_wcsdup
_acmdln
exit
_XcptFilter
_exit
memmove
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z
free
kernel32
GetStartupInfoA
GetModuleHandleA
FreeLibrary
VirtualProtectEx
GetLastError
LoadLibraryA
GetProcAddress
VirtualProtect
GetVersionExA
lstrcmpiA
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
lstrcpyA
user32
FindWindowA
SendMessageA
MessageBoxW
MessageBoxA
DialogBoxParamA
DialogBoxParamW
GetWindowTextA
GetWindowTextW
GetWindowLongA
PostMessageA
crypt32
CertEnumSystemStore
CryptEnumOIDInfo
CertOpenStore
CertEnumCertificatesInStore
CertGetCRLContextProperty
CertDuplicateCRLContext
CertCloseStore
CertGetNameStringW
CertGetEnhancedKeyUsage
CryptFindOIDInfo
CryptAcquireCertificatePrivateKey
CertCreateCertificateChainEngine
CertGetCertificateChain
CertAddCertificateContextToStore
CertAddCTLContextToStore
CertAddCRLContextToStore
CertSetCertificateContextProperty
CertFreeCertificateContext
CertFreeCertificateChain
CertFreeCertificateChainEngine
PFXExportCertStore
CertFreeCRLContext
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE