Static task
static1
Behavioral task
behavioral1
Sample
fb8b9eb10704c137cc33a9be63fbd905_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fb8b9eb10704c137cc33a9be63fbd905_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb8b9eb10704c137cc33a9be63fbd905_JaffaCakes118
-
Size
171KB
-
MD5
fb8b9eb10704c137cc33a9be63fbd905
-
SHA1
9b75b389554471b8a86fefeb4f03f638dc8b3a81
-
SHA256
732a9daf2c67e5b9b4fc591e4503a97bd39e9e77fc2f8825f301404f60120e33
-
SHA512
bf3eda72907ffa6b6184a60d61f6fc1d85b6d681d30ba9d0b8e37d1c3701a4e0c5b397e20b30625666a4cb5e229d987712ee3ae939853abcb05de168fe1f5032
-
SSDEEP
3072:y7Qx8EqMQfn6MyYiCEmPmmWq2axz30neCS6+rSdwOUbciTjBReZiXsTnRP:y7Qx8u46MyYJEmPndZ3CeCS6+ywDciTG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb8b9eb10704c137cc33a9be63fbd905_JaffaCakes118
Files
-
fb8b9eb10704c137cc33a9be63fbd905_JaffaCakes118.exe windows:4 windows x86 arch:x86
7599bf08d799eca5f7ba036561842b27
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
mciSendCommandA
sndPlaySoundA
shlwapi
PathAddBackslashA
kernel32
LoadLibraryW
CreateThread
GetAtomNameW
GetTempPathA
EnterCriticalSection
WaitForSingleObject
InitializeCriticalSection
lstrcpyA
FileTimeToSystemTime
ResetEvent
EnumResourceNamesA
DeleteCriticalSection
GetFullPathNameW
Sleep
GetTickCount
IsDBCSLeadByte
LoadLibraryA
QueryMemoryResourceNotification
LeaveCriticalSection
OutputDebugStringA
GetFullPathNameA
GetProcAddress
SetEvent
GetTimeZoneInformation
FreeLibrary
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
setupapi
InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
msimg32
AlphaBlend
TransparentBlt
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ