Static task
static1
Behavioral task
behavioral1
Sample
faa16581465017658d590845e3b9a814_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
faa16581465017658d590845e3b9a814_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
faa16581465017658d590845e3b9a814_JaffaCakes118
-
Size
362KB
-
MD5
faa16581465017658d590845e3b9a814
-
SHA1
03af69758631c2625f95902245a59c604517547a
-
SHA256
ee06cbac2b2603a18a8171fe0e2ae9238c796ffc9eed01c0669f2114f018ed0c
-
SHA512
f9fe9cb79f85e9e2b49759b81fade72cbff566fb51cca03cee8b415fa7e6c0b93ce996c301ca6696aba1af7d28aeac97c968957076907d715fffdfbdab9e45f2
-
SSDEEP
6144:fbQ4p5rptVLMztkVwZcl2OzZ+hz06PiAsJXtfvWt73+mBGDbDvDhwufZIQo/unyE:fbQ4xtVLNV8GZmz1PiAsJ2+bDv1fZI0R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource faa16581465017658d590845e3b9a814_JaffaCakes118
Files
-
faa16581465017658d590845e3b9a814_JaffaCakes118.exe windows:4 windows x86 arch:x86
f1f2eb43213e8cd86cae18dfdac2c231
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PeekConsoleInputA
GetSystemTime
VirtualProtect
GlobalMemoryStatus
GetACP
GetCommandLineA
InterlockedExchange
IsDebuggerPresent
LoadLibraryExA
WaitForSingleObject
lstrlenA
ResumeThread
HeapCreate
GetTapeStatus
GetUserDefaultLCID
GetCurrentProcessId
GetModuleHandleA
HeapDestroy
GlobalSize
GetTimeFormatA
FreeConsole
user32
ShowWindow
BeginPaint
AnyPopup
DrawTextA
FillRect
GetFocus
EndPaint
GetCursorPos
GetTitleBarInfo
GetDC
ReleaseDC
wsprintfA
GetParent
CreateIcon
GetWindow
GetClassNameA
FrameRect
DragDetect
SetForegroundWindow
ntshrui
GetNetResourceFromLocalPathA
IsFolderPrivateForUser
GetLocalPathFromNetResourceA
DllGetClassObject
SetFolderPermissionsForSharing
hnetcfg
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ