Static task
static1
Behavioral task
behavioral1
Sample
fafd113da9d28b88ff0c9d771d20cff8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fafd113da9d28b88ff0c9d771d20cff8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fafd113da9d28b88ff0c9d771d20cff8_JaffaCakes118
-
Size
94KB
-
MD5
fafd113da9d28b88ff0c9d771d20cff8
-
SHA1
b42ed92eb9f91868bdc83dd83c2032e6351ff960
-
SHA256
80d8118cef3a88adbf1d40d9b0b006b93bb47f04941001d15187854ebeeba57d
-
SHA512
1ccffad45074108542b30fbc89438c0a91c9240e429f109774c12ba6042adf50e35e81b13446f5909f215ed1046878dfb5bd273929bd65152fa31c55b913d577
-
SSDEEP
1536:ZZQnys6N/XyeyO1pS9ye+0sQcVH3vfjMovkYL8TjF86U+Jf:ZSnysOPlyO1A9ye+0sQeH3vbufu6U+V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fafd113da9d28b88ff0c9d771d20cff8_JaffaCakes118
Files
-
fafd113da9d28b88ff0c9d771d20cff8_JaffaCakes118.exe windows:4 windows x86 arch:x86
96ad732098763118db3e4feac6a25bb2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PostQuitMessage
DefWindowProcW
SendMessageW
LoadCursorW
CreateWindowExW
RegisterClassExW
DestroyWindow
DestroyCursor
DestroyCaret
DestroyAcceleratorTable
DialogBoxIndirectParamW
DrawIcon
DestroyIcon
DeferWindowPos
CreatePopupMenu
DrawFocusRect
DrawFrameControl
kernel32
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStartupInfoW
lstrcpyW
lstrcatW
LoadLibraryA
GetProcessHeap
HeapAlloc
GetModuleHandleW
GetStringTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
comctl32
ord17
InitCommonControlsEx
Sections
.text Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 656B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ