Static task
static1
Behavioral task
behavioral1
Sample
faab197097624e38310cfbf66d0de37b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
faab197097624e38310cfbf66d0de37b_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
faab197097624e38310cfbf66d0de37b_JaffaCakes118
-
Size
642KB
-
MD5
faab197097624e38310cfbf66d0de37b
-
SHA1
56d1525593f2abd9c85b8e6d37ed75ae30b6aa80
-
SHA256
195dc3a999b65973eaba00a07e497fb7d42eb7b4c3fd29895764a6d33a98974a
-
SHA512
b5e9883e543515016e6c9b1464f4d4d8405c8d3e81e22f7405df76a5de53642edb84c17b9fb70b7dddfafd2d2d1a2e0020d5df971c9fb40e8aada44084604deb
-
SSDEEP
12288:7xBputUUZyTYqC3XpYYm9E0lvjaE9zt6WxF6dBRlz:7x4ZfqmXOf9E0lLaE9ztXqRl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource faab197097624e38310cfbf66d0de37b_JaffaCakes118
Files
-
faab197097624e38310cfbf66d0de37b_JaffaCakes118.exe windows:6 windows x86 arch:x86
90045948f2ffabc2b7089e09ac81684a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsProcessorFeaturePresent
GetUserDefaultLCID
IsValidCodePage
comctl32
InitCommonControlsEx
imm32
ImmSimulateHotKey
iphlpapi
InternalDeleteIpForwardEntry
user32
MoveWindow
GetSubMenu
WaitMessage
LoadIconW
GetDlgItemTextW
BeginPaint
CheckDlgButton
GetDC
UpdateWindow
PtInRect
MessageBoxW
ReleaseCapture
IsDlgButtonChecked
GetWindowPlacement
WinHelpW
SendMessageW
LoadBitmapW
GetMessageW
FrameRect
SetDlgItemTextW
InvalidateRect
GetDlgItem
DispatchMessageW
GetMenu
DestroyWindow
DialogBoxParamW
DrawTextW
RegisterClassW
InvertRect
PeekMessageW
UnionRect
CreateWindowExW
wsprintfW
EndDialog
OffsetRect
GetForegroundWindow
GetClientRect
LoadAcceleratorsW
FillRect
EnableMenuItem
EndPaint
DefWindowProcW
GetDesktopWindow
IntersectRect
GetSystemMetrics
ShowWindow
GetWindowRect
LoadCursorW
TranslateAcceleratorW
CheckRadioButton
SetRect
SetCapture
DrawMenuBar
IsZoomed
PostMessageW
ReleaseDC
Sections
.text Size: 242KB - Virtual size: 242KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 205KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ