Static task
static1
Behavioral task
behavioral1
Sample
fb06e609078a23425f528ff260fb8ea4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb06e609078a23425f528ff260fb8ea4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb06e609078a23425f528ff260fb8ea4_JaffaCakes118
-
Size
67KB
-
MD5
fb06e609078a23425f528ff260fb8ea4
-
SHA1
9d7ed3d87357b6338a67ffd3cebba8b1a50198cc
-
SHA256
6a17a22a9697b32ef1cfa4799a0554ae2ac33c5d9d06e97b47c3a364d8767b67
-
SHA512
e66deb19b044bf755ce9ac1f916da1526933d6be93053f82699fbe085e6ad4a8326188a52f9affd98fa0bd0f27de5fc2304f267ce069ed6c659357cf7b59cec9
-
SSDEEP
1536:8IuLnDP5k83Xn9zAOS8LnSV9gR5L8ESExPkDnlrrDVY:gDze83X9zAOSmn9t8ESoPkr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb06e609078a23425f528ff260fb8ea4_JaffaCakes118
Files
-
fb06e609078a23425f528ff260fb8ea4_JaffaCakes118.exe windows:4 windows x86 arch:x86
00dfbcffefad59baf86e49f5257bdedb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
GetFileAttributesW
InitializeCriticalSection
CloseHandle
ExpandEnvironmentStringsW
ResetEvent
ReleaseMutex
FindNextFileW
HeapAlloc
OpenMutexW
lstrlenA
VirtualAlloc
GetLocalTime
MultiByteToWideChar
GetVersionExW
VirtualProtect
SetFilePointer
lstrlenW
lstrcatA
GetSystemTimeAsFileTime
GetFileSizeEx
shlwapi
PathRemoveFileSpecW
SHDeleteKeyA
PathFindFileNameW
StrStrW
PathCombineW
wvnsprintfW
StrCmpNIW
wnsprintfA
PathMatchSpecW
user32
FindWindowExA
CharLowerBuffA
GetClipboardData
GetKeyboardState
GetWindowThreadProcessId
SetThreadDesktop
ToUnicode
OpenWindowStationA
DrawIcon
GetCursorPos
GetIconInfo
DispatchMessageA
GetDlgItem
GetDlgItemTextA
SendMessageA
SetProcessWindowStation
GetWindowTextA
GetKeyState
LoadCursorA
OpenDesktopA
EndDialog
advapi32
CryptCreateHash
CryptDestroyHash
CryptAcquireContextW
RegEnumKeyExA
GetUserNameW
CryptHashData
CryptReleaseContext
RegCloseKey
RegCreateKeyExA
Sections
.text Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE