Static task
static1
Behavioral task
behavioral1
Sample
fbb1c58a51f94f00d6fa6365a3a00bc6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fbb1c58a51f94f00d6fa6365a3a00bc6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbb1c58a51f94f00d6fa6365a3a00bc6_JaffaCakes118
-
Size
447KB
-
MD5
fbb1c58a51f94f00d6fa6365a3a00bc6
-
SHA1
de28ac16d57df5e5db199f7fa8b7079e3e2032f2
-
SHA256
964b897506255744ac5c0e184b8b9a2428a633f84d52f32796ecbde7b7f3375c
-
SHA512
79a2ecfe3553243d1fae65242a94add67d6ed037d8b4f4e5c4057d605a71f3349fbcea8c3580d37036cab7ba3cf09a6909577a1dbe21c419e497959701cac8e7
-
SSDEEP
12288:5M2k/5CJKfPZxKJpSEIP13toJrq0W55T6:6rcOPuHd6puJ+P55W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbb1c58a51f94f00d6fa6365a3a00bc6_JaffaCakes118
Files
-
fbb1c58a51f94f00d6fa6365a3a00bc6_JaffaCakes118.exe windows:4 windows x86 arch:x86
7ad651ea114a4921bd75d1b39758ffba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GlobalAddAtomA
Sleep
GetLocaleInfoA
CloseHandle
GetStdHandle
FileTimeToLocalFileTime
EnterCriticalSection
GlobalFree
GetDriveTypeA
GlobalDeleteAtom
InterlockedExchange
LoadLibraryExA
LockResource
HeapCreate
RaiseException
SetErrorMode
SetConsoleOutputCP
GetLastError
VirtualProtect
GlobalUnlock
user32
EndPaint
GetActiveWindow
ShowWindow
GetMenuItemInfoA
GetWindow
ReleaseDC
DrawTextA
SetForegroundWindow
GetFocus
OemToCharA
DrawEdge
GetParent
GetCursorPos
GetClassNameA
BeginPaint
GetWindowTextA
ValidateRect
IsIconic
ClipCursor
ntdsapi
DsBindA
DsFreeNameResultA
DsIsMangledDnA
DsCrackNamesA
DsGetSpnA
netapi32
DsRoleCancel
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ