Static task
static1
Behavioral task
behavioral1
Sample
febd7c5f7a98179c68903a528a9c7435_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
febd7c5f7a98179c68903a528a9c7435_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
febd7c5f7a98179c68903a528a9c7435_JaffaCakes118
-
Size
106KB
-
MD5
febd7c5f7a98179c68903a528a9c7435
-
SHA1
d5556029ade98f932883e2b9a1d51214a8e2459a
-
SHA256
0fe67c38e4bc17b41bc005164d3863d064ff0fcf9716061a6f3440f1ebf12275
-
SHA512
6b2b7cf75818e9dd6a87ca242dbadc9618d7d2a58e7275f6736831cab4ba734847a866ca3f169026b4917181d3964c5fa4d851c0d34026e99c2a86b9c2fe8fa0
-
SSDEEP
3072:lhlk2cRvk474zzEgSo6B7YvhYY09i8uS:fKpRvk4vsJ3I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource febd7c5f7a98179c68903a528a9c7435_JaffaCakes118
Files
-
febd7c5f7a98179c68903a528a9c7435_JaffaCakes118.exe windows:5 windows x86 arch:x86
c1227d46f61b02c179fe14c4d25832e4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
??1type_info@@UAE@XZ
??3@YAXPAX@Z
__CxxFrameHandler
_CxxThrowException
_except_handler3
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
ExitProcess
lstrcpyA
GetTempPathA
CloseHandle
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetLastError
lstrcatA
WriteFile
lstrcpynA
lstrlenA
lstrcmpA
CreateFileA
user32
GetFocus
wsprintfA
InflateRect
GetCursorPos
EqualRect
IsWindowVisible
ClientToScreen
shlwapi
SHGetValueA
gdi32
GetBkColor
GetBkMode
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE