Static task
static1
Behavioral task
behavioral1
Sample
feb228cf47131c54ea97023a4f48eeef_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
feb228cf47131c54ea97023a4f48eeef_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
feb228cf47131c54ea97023a4f48eeef_JaffaCakes118
-
Size
123KB
-
MD5
feb228cf47131c54ea97023a4f48eeef
-
SHA1
301714c9db76de7d4e1ba122e306f3a664f12332
-
SHA256
7fba737721933d9f34386c17f37f7d76dd65023bd700a5c69f261734f27ff969
-
SHA512
a68d685554c3d60751ea1c5ee082d4c0b10158e969ab057558d9e6e305fd7431cf6a20b3f72cf7073707d8ffda974027a52bfefb0fcedad446a47da6e800e1a3
-
SSDEEP
3072:E3eJWQyvjjwHfTLx5btEE7fEyws3uWVs:ZWQyLeLnOqfN+W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feb228cf47131c54ea97023a4f48eeef_JaffaCakes118
Files
-
feb228cf47131c54ea97023a4f48eeef_JaffaCakes118.exe windows:4 windows x86 arch:x86
8d6e7397a5b014d530de990bdeb34c0e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysFreeString
gdi32
GetClipBox
GetDIBColorTable
advapi32
RegOpenKeyA
kernel32
lstrlenA
LocalFree
FindClose
LocalAlloc
GetModuleHandleA
GetLastError
GlobalAlloc
GetACP
GetProcAddress
GetCommandLineA
LockResource
ExitThread
GetUserDefaultLCID
GetCurrentThreadId
VirtualAllocEx
GetStartupInfoA
Sleep
SetThreadLocale
LoadLibraryA
comctl32
ImageList_GetBkColor
ImageList_Add
ImageList_Write
ImageList_Destroy
ImageList_Read
ImageList_Remove
version
VerInstallFileA
GetFileVersionInfoSizeA
user32
GetCursor
IsWindowEnabled
SetRect
GetWindowTextA
GetDesktopWindow
EnableScrollBar
ChildWindowFromPoint
GetSysColorBrush
CharLowerA
GetParent
GetMessagePos
CharNextA
PostMessageA
DrawIconEx
wsprintfA
BeginPaint
GetFocus
IsWindowVisible
GetMenuItemCount
IsWindowUnicode
FrameRect
GetActiveWindow
SetScrollRange
DrawTextA
SendMessageA
GetClientRect
CheckMenuItem
SetMenu
SetWindowPlacement
GetKeyboardLayoutNameA
TrackPopupMenu
GetSystemMenu
ClientToScreen
UnhookWindowsHookEx
KillTimer
CharLowerBuffA
DestroyMenu
FindWindowA
shell32
SHFileOperationA
SHGetFolderPathA
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ