Static task
static1
Behavioral task
behavioral1
Sample
fa09f35f840cc96b70747b91353edb04_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fa09f35f840cc96b70747b91353edb04_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa09f35f840cc96b70747b91353edb04_JaffaCakes118
-
Size
163KB
-
MD5
fa09f35f840cc96b70747b91353edb04
-
SHA1
5ada08b9bef11b45c305c18b7ef175ba1588b8d2
-
SHA256
a936b028a289062f40494e01c20bd7615dde865579e9499f70aa6cfa1a3b903e
-
SHA512
a31a98771240d34df48e0d1bfbe98cd0fe72385bad0091798a9ee957bfdb637ca86969b873f6d85c130affcea45ce7b56ae3caf7dfaa25c2776e79258aa5bf37
-
SSDEEP
3072:MtdZxmbxsJNiIufJ0KWVHEinjGqd6BsKI7ifNCSAUT:MtVmiKVfs9JGnpI7iVv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa09f35f840cc96b70747b91353edb04_JaffaCakes118
Files
-
fa09f35f840cc96b70747b91353edb04_JaffaCakes118.exe windows:4 windows x86 arch:x86
5b1765da30cafb0f5309c31c2f58323a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
CharUpperW
SetTimer
wsprintfW
CharNextW
GetDC
GetMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
UpdateWindow
KillTimer
UnregisterClassA
advapi32
RegDeleteValueW
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
kernel32
LockResource
FillConsoleOutputCharacterA
GetTickCount
GetCPInfo
GetProcessWorkingSetSize
WideCharToMultiByte
GlobalAlloc
lstrcpyW
lstrlenW
GetLastError
MultiByteToWideChar
lstrcmpiW
CreateFileMappingW
EnumResourceNamesA
OutputDebugStringW
FindClose
FreeEnvironmentStringsW
GetACP
GlobalFree
lstrcpyA
InitializeCriticalSection
GetModuleHandleW
oleacc
LresultFromObject
CreateStdAccessibleObject
psapi
GetProcessMemoryInfo
gdi32
DeleteObject
CreateFontIndirectW
GetTextMetricsW
GetOutlineTextMetricsW
SelectObject
AddFontResourceExW
shell32
SHGetFileInfoW
ole32
CoInitialize
CoRevokeClassObject
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoRegisterClassObject
CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
StringFromCLSID
Sections
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ