Static task
static1
Behavioral task
behavioral1
Sample
fa557bfec18c5df889d361144690be49_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa557bfec18c5df889d361144690be49_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa557bfec18c5df889d361144690be49_JaffaCakes118
-
Size
100KB
-
MD5
fa557bfec18c5df889d361144690be49
-
SHA1
220dd7467792f276d69e12c4e18794db2011284b
-
SHA256
702245bad114bd13a8a3857406930127e5ba7d1547ab471d2b4f6822cea6d24f
-
SHA512
4d16dc05b8d3c07b61fcabe5b2d5cbafc7ae57bd1706b45426c1b204f0fade70b92660ec621788b32ba62c7d50b8172875655786895e5e7c0efcb58ee1e7c090
-
SSDEEP
768:mlKV8qDAgKKCWHoyUjbaBZKzOT5x3bct9Zs1cRqf:mc9MXoEOT5x3bmA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa557bfec18c5df889d361144690be49_JaffaCakes118
Files
-
fa557bfec18c5df889d361144690be49_JaffaCakes118.exe windows:1 windows x86 arch:x86
57f362417c54a04b9f8fd65ae1169b9d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
GetModuleFileNameA
SetEvent
InitializeCriticalSection
lstrcmpiW
GetACP
GetProcAddress
GetProcessHeap
GetSystemTimeAsFileTime
LocalAlloc
GetStartupInfoW
LocalFree
CreateFileW
CreateFileW
GetProcAddress
HeapAlloc
GetCurrentProcess
GetLastError
FormatMessageW
CreateFileW
HeapDestroy
HeapReAlloc
GetTickCount
InitializeCriticalSection
GetACP
Sections
.vcgc Size: 87KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.wnvr Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.voew Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rxhp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ngrt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vnmn Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enwd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xpya Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dqav Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE