Static task
static1
Behavioral task
behavioral1
Sample
0fab0a4aa0fe7052c94e764c0ef55511_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0fab0a4aa0fe7052c94e764c0ef55511_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0fab0a4aa0fe7052c94e764c0ef55511_JaffaCakes118
-
Size
280KB
-
MD5
0fab0a4aa0fe7052c94e764c0ef55511
-
SHA1
aa96504e3f4cb654d2d7c1d04396d5775b603596
-
SHA256
6ca0f4251a8433c6d057ed5df1b7b8e4ff182232223f0d61ae1e8725c8cad437
-
SHA512
5d15ff4f6a137ab99f4abbc55cbc8ca76399326bab6762686bc2efc405ad8bb02053e6969a98c9beb9b3eb3cd59fbfbcad4168abceb11cb6688744d45fe0cf29
-
SSDEEP
6144:wIB2cT++ibE7+qkV5E2Xf9OFXZ+hpfVqTC:DBT5KqmO2y0ba
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fab0a4aa0fe7052c94e764c0ef55511_JaffaCakes118
Files
-
0fab0a4aa0fe7052c94e764c0ef55511_JaffaCakes118.exe windows:5 windows x86 arch:x86
66ebc4bfa25cf31d1f9488d8542c9525
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetSystemPaletteUse
GdiFlush
SetPixel
UnrealizeObject
GetFontData
EnumFontFamiliesExA
GetPixel
GetClipRgn
GetTextMetricsA
EnumEnhMetaFile
GetClipBox
IntersectClipRect
SelectPalette
GetOutlineTextMetricsA
SetTextColor
CreateRectRgnIndirect
SetROP2
CreateBrushIndirect
AbortDoc
CreateRectRgn
GdiSetBatchLimit
SetBkColor
GetNearestColor
EndPage
advapi32
RegSetValueExA
user32
EnumWindows
EqualRect
DrawEdge
DestroyMenu
GetDoubleClickTime
LoadCursorA
GetWindowTextW
UpdateWindow
DestroyWindow
SetWindowTextA
GetCursorPos
GetTopWindow
BeginPaint
ScrollDC
GetScrollPos
SetCursor
SetClassLongA
LoadImageA
TranslateMDISysAccel
MessageBeep
SetWindowPos
DestroyCaret
SetScrollInfo
FillRect
GetMenuItemCount
GetParent
KillTimer
SetMenu
kernel32
DeleteFileA
GetSystemTime
lstrlenW
Beep
LoadResource
SetFileTime
ResumeThread
InterlockedDecrement
FileTimeToSystemTime
GlobalAddAtomA
GlobalUnlock
GetProfileIntA
SleepEx
GetTickCount
GetLastError
GetVersionExA
GetVersion
VirtualFree
GetStringTypeA
GetUserDefaultLCID
ResetEvent
LocalFree
GetPriorityClass
SetCurrentDirectoryW
GlobalAlloc
IsValidCodePage
SetErrorMode
GetTempPathA
SizeofResource
GlobalLock
GlobalAddAtomW
ole32
ReleaseStgMedium
OleRegEnumFormatEtc
OleDestroyMenuDescriptor
GetClassFile
OleSetClipboard
OleCreateLink
CoGetClassObject
ProgIDFromCLSID
CoRegisterMessageFilter
ntdll
ZwProtectVirtualMemory
NtSetSystemInformation
ZwSetEvent
NtQueryInformationFile
RtlCompareString
NtSuspendThread
NtCreateMutant
getuetpp
_Denorm
_FRteps
_Stod
_FSnan
_Inf
_LDtest
_LSinh
_Stold
_FDnorm
Sections
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ