Static task
static1
Behavioral task
behavioral1
Sample
fbac1e60034e104b248783a62cd5817c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fbac1e60034e104b248783a62cd5817c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbac1e60034e104b248783a62cd5817c_JaffaCakes118
-
Size
206KB
-
MD5
fbac1e60034e104b248783a62cd5817c
-
SHA1
63eaf14edb614f6c8eff23aa8ed7f2134c4b89e0
-
SHA256
d545b56b1aeb0674cf56a79e15b7f73c3d4b47334a85ea424ef26e29071cf991
-
SHA512
aa84302cde0d12d73e7ebd8689452afeac35d8b7a7affa71253d75b92f5d26e933615221a93e84c6c7c76bf03dfd6331333fcffb22d58ceb06ef4d2d375ebdc9
-
SSDEEP
3072:HoQsqG0WEfCG05NkZeJp0TFbHtiSCVwylGm4y:j3+/G0YQpmBHt/s5GmH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbac1e60034e104b248783a62cd5817c_JaffaCakes118
Files
-
fbac1e60034e104b248783a62cd5817c_JaffaCakes118.exe windows:5 windows x86 arch:x86
57da473c6c3636755f9fdafe64a91894
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
TextOutW
SetTextAlign
SetTextColor
CreatePatternBrush
SetTextCharacterExtra
GetWindowExtEx
ExcludeClipRect
SelectClipRgn
CreateFontIndirectW
SelectObject
PolylineTo
SetWindowOrgEx
GetObjectW
GetClipBox
ArcTo
ExtTextOutW
SetMapperFlags
SetMapMode
ExtCreatePen
CopyMetaFileW
ScaleWindowExtEx
CreateRectRgn
GetCurrentPositionEx
msvcrt
isdigit
_ltow
__dllonexit
_snwprintf
isupper
wcscpy
_ultoa
strncmp
free
_itow
_wcsnicmp
wcscat
isxdigit
strncpy
wcscmp
_initterm
_adjust_fdiv
_ltoa
_onexit
bsearch
qsort
atol
_commit
_wcsicmp
wcslen
_except_handler3
memmove
wcschr
strtoul
dnsapi
DnsValidateName_UTF8
DnsApiAlloc
DnsApiFree
comctl32
InitCommonControlsEx
ImageList_GetIconSize
CreateToolbarEx
ImageList_Destroy
ImageList_Draw
PropertySheetW
CreatePropertySheetPageW
comdlg32
GetOpenFileNameA
PrintDlgA
kernel32
DeleteFileW
CompareStringA
LocalReAlloc
TlsFree
HeapSize
RtlUnwind
CompareStringW
SetErrorMode
FreeEnvironmentStringsA
TerminateProcess
FindClose
GlobalHandle
HeapFree
LCMapStringW
GetFileTime
LeaveCriticalSection
GlobalLock
VirtualAlloc
GetStartupInfoW
ExitProcess
DuplicateHandle
Sleep
FindResourceW
LocalFileTimeToFileTime
CreateEventW
GlobalReAlloc
GetStringTypeExW
WritePrivateProfileStringW
CreateThread
GetVersionExW
GetModuleFileNameW
GlobalAlloc
GetFileSize
InterlockedDecrement
HeapReAlloc
GetVersionExA
SetFilePointer
GetCurrentThreadId
TlsGetValue
GetUserDefaultLCID
GetProcessHeap
FormatMessageW
SetFileAttributesW
VirtualFree
GetLastError
GetEnvironmentStringsW
SetLastError
GlobalUnlock
CloseHandle
GetVersion
ResumeThread
TlsSetValue
lstrlenA
GetCommandLineA
DeleteCriticalSection
GetDriveTypeW
GetFileAttributesA
lstrcmpA
GetCurrentThread
ReadFile
SystemTimeToFileTime
InitializeCriticalSection
SizeofResource
FreeResource
GlobalFree
LockResource
UnlockFile
MulDiv
SetUnhandledExceptionFilter
FlushFileBuffers
SetThreadPriority
IsValidCodePage
FreeEnvironmentStringsW
SetEndOfFile
LockFile
FindFirstFileW
LoadResource
LoadLibraryA
EnumResourceLanguagesW
GlobalDeleteAtom
InterlockedExchange
GetCurrentProcess
GlobalAddAtomW
UnhandledExceptionFilter
GetPrivateProfileStringW
GetVolumeInformationW
HeapDestroy
GlobalFlags
FatalAppExitA
ResetEvent
CreateProcessW
GlobalFindAtomW
WideCharToMultiByte
GetCurrentDirectoryA
LocalAlloc
WriteFile
SuspendThread
GetModuleHandleA
GetLocaleInfoW
SetFileTime
MoveFileW
SetCurrentDirectoryA
GetShortPathNameW
GetSystemInfo
GetAtomNameW
TlsAlloc
GetFileAttributesW
CopyFileW
SetEvent
lstrcmpiW
FileTimeToLocalFileTime
GetStdHandle
GetEnvironmentStrings
ExitThread
HeapAlloc
RaiseException
lstrlenW
lstrcmpW
ConvertDefaultLocale
GetPrivateProfileIntW
IsDebuggerPresent
GetCPInfo
CreateFileW
GetCurrentProcessId
GetOEMCP
GetCommandLineW
FindNextFileW
WaitForSingleObject
GetThreadLocale
LCMapStringA
GlobalSize
GetACP
FileTimeToSystemTime
InterlockedIncrement
GlobalGetAtomNameW
EnterCriticalSection
SetHandleCount
HeapCreate
GetFullPathNameW
lstrcpyA
Sections
.data Size: 60KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ