Static task
static1
Behavioral task
behavioral1
Sample
fe699d9abfc4d22b9169622c063c1f9c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe699d9abfc4d22b9169622c063c1f9c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe699d9abfc4d22b9169622c063c1f9c_JaffaCakes118
-
Size
108KB
-
MD5
fe699d9abfc4d22b9169622c063c1f9c
-
SHA1
09a5ce303354b531fedcf106ae2056b5e2f2245f
-
SHA256
e6694aeae3ddf79ad1999da85be38c8f24e5ccc0ba9afaaa1618a0cf5ba41103
-
SHA512
440e5ba5253f3b5050950396d3307b0ea2a848562bfa165a5598e9f411835b04178b1c11a41a6908aab4f06326ccdc22e158e7df0f5eabb6339aa4493879cb1b
-
SSDEEP
1536:h0M1eFTl6jB4Uyk4IRi3VGnPgOf0gfQQfhp2RzQPZsd4bP3Sz:hh1exuqk4IElqsjQfhp2RRwPC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe699d9abfc4d22b9169622c063c1f9c_JaffaCakes118
Files
-
fe699d9abfc4d22b9169622c063c1f9c_JaffaCakes118.exe windows:4 windows x86 arch:x86
4da67dfa24db2d6503cba52ee5d2de76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsDirectoryA
shell32
SHGetDiskFreeSpaceA
ole32
WriteClassStm
CLSIDFromProgID
CoDisconnectObject
StgCreateDocfileOnILockBytes
CoTaskMemFree
CreateStreamOnHGlobal
kernel32
SetEvent
GetModuleHandleA
WriteFile
GetACP
SizeofResource
VirtualAlloc
ExitProcess
GetDateFormatA
WaitForSingleObject
GetProcAddress
MoveFileA
FreeResource
LocalReAlloc
GetEnvironmentStrings
CreateEventA
ExitThread
gdi32
CreateBitmap
version
VerFindFileA
VerInstallFileA
user32
GetActiveWindow
GetCursorPos
CallNextHookEx
SetScrollInfo
SetForegroundWindow
CharUpperBuffA
GetMenuItemInfoA
OffsetRect
RemovePropA
SetRect
SetWindowLongW
SetPropA
OpenClipboard
DrawIconEx
MapWindowPoints
GetCursor
InsertMenuA
EndPaint
GetWindowPlacement
CreateWindowExA
GetScrollInfo
SendMessageA
GetWindowDC
CreateMenu
DeleteMenu
IsZoomed
DefWindowProcA
GetMenuItemCount
SetScrollPos
CharNextW
IsWindow
DefMDIChildProcA
GetWindow
PostQuitMessage
ShowOwnedPopups
InsertMenuItemA
GetTopWindow
GetClassInfoA
GetKeyboardState
GetWindowTextA
UpdateWindow
DispatchMessageA
GetClassLongA
GetDesktopWindow
BeginPaint
WaitMessage
CharNextA
RedrawWindow
PtInRect
GetSysColorBrush
GetClipboardData
DestroyIcon
SetClassLongA
SetWindowPlacement
InflateRect
CharLowerA
FillRect
GetFocus
SetCapture
IsWindowEnabled
GetMenuState
GetWindowRect
GetMenuStringA
ScreenToClient
SetFocus
MessageBoxA
WindowFromPoint
PeekMessageA
GetLastActivePopup
ShowWindow
IsDialogMessageW
ActivateKeyboardLayout
GetSystemMetrics
RegisterWindowMessageA
LoadIconA
UnregisterClassA
GetKeyboardLayoutList
MapVirtualKeyA
SetClipboardData
SetWindowLongA
LoadBitmapA
MsgWaitForMultipleObjects
DrawEdge
DrawFrameControl
ShowScrollBar
IsWindowVisible
GetPropA
DestroyWindow
FrameRect
CloseClipboard
GetKeyboardLayoutNameA
EnumThreadWindows
CharLowerBuffA
DrawTextA
CharToOemA
Sections
CODE Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE