Static task
static1
Behavioral task
behavioral1
Sample
fa187b7dc2bdc09b230e85cc0897f330_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fa187b7dc2bdc09b230e85cc0897f330_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa187b7dc2bdc09b230e85cc0897f330_JaffaCakes118
-
Size
289KB
-
MD5
fa187b7dc2bdc09b230e85cc0897f330
-
SHA1
da972218902ee8066f47ac6920906cc99082d687
-
SHA256
0bbeb84d5049a506a7c33e5537c5e4d80ee87ee99b22b7d0fa192b0db8346d41
-
SHA512
c374d35f0f5507637a8ce5efb76ce2560d30cc7cf831c6ac816e432e38ec00d3f22f7a9731cbeb61080d32a408af265f99947fcca8066578bf4ec11a338e46e9
-
SSDEEP
6144:ZBj8S87ctp3cXg9iy4vf7PX8FTJsdDEfEQzui4OcDNQ9PW2z:ZZ7t8vtH7PsA1EfRSiteNQ9PD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa187b7dc2bdc09b230e85cc0897f330_JaffaCakes118
Files
-
fa187b7dc2bdc09b230e85cc0897f330_JaffaCakes118.exe windows:4 windows x86 arch:x86
13a380d0688da8583f34506e346ea449
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
CompareStringA
GetCurrentProcessId
ReleaseSemaphore
DeleteAtom
GetStdHandle
DeviceIoControl
SetFilePointer
GetConsoleMode
GetModuleHandleA
FreeLibrary
user32
SendMessageA
Sections
HuUVHNMR Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ZtUGoXhl Size: 1024B - Virtual size: 666B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
egRYXUDT Size: 259KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE