Static task
static1
Behavioral task
behavioral1
Sample
fb22e057087c26c22c1077dc1aadfa80_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb22e057087c26c22c1077dc1aadfa80_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb22e057087c26c22c1077dc1aadfa80_JaffaCakes118
-
Size
18KB
-
MD5
fb22e057087c26c22c1077dc1aadfa80
-
SHA1
977ebac5f3208a5ed8c28e67ba404504a150804f
-
SHA256
e55546a8794f3de511dd7795d27583f88cad27c0fa0014db9230764f9587e15d
-
SHA512
16c94a5fd09c0f6694ac6c8261c854f5adf51e9d5bed06eaa4740224b6e39323581da4f4c429b7ec8804fb0d7b703941963b42321684af7ddc248d6f59b0322a
-
SSDEEP
192:aUQdsNRWV91aF9fQJJR3jU59HspRENkVySayko+9CeHI8ZBwh:aUQSC1ESJWPHspRukVl1fbeHI8ZU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb22e057087c26c22c1077dc1aadfa80_JaffaCakes118
Files
-
fb22e057087c26c22c1077dc1aadfa80_JaffaCakes118.exe windows:4 windows x86 arch:x86
33c0645cfdd5e57694bd4a767aec30fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetCurrentThreadId
lstrcpyA
GetSystemDefaultLCID
lstrcatA
TlsSetValue
GetCurrentProcessId
GetCommandLineA
VirtualAlloc
GetOEMCP
FreeLibrary
TlsFree
TlsGetValue
GetCurrentThread
GetDriveTypeW
GetUserDefaultLCID
CreateProcessInternalW
GetLogicalDrives
GetACP
GetModuleFileNameA
IsDBCSLeadByte
user32
IsIconic
IsWindowVisible
CloseWindow
GetWindowTextLengthA
UpdateWindow
GetClassInfoExA
RegisterClassA
ReleaseDC
GetWindow
GetWindowDC
GetFocus
GetWindowLongA
GetForegroundWindow
GetDC
ValidateRect
GetActiveWindow
GetSystemMetrics
GetWindowTextA
ShowWindow
imagehlp
FindDebugInfoFile
CheckSumMappedFile
ImageNtHeader
ImageLoad
BindImage
FindFileInPath
oleacc
LresultFromObject
GetStateTextA
DllRegisterServer
GetRoleTextA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ