Static task
static1
Behavioral task
behavioral1
Sample
fbb46a1bd8e2f5c27f756940c463c779_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fbb46a1bd8e2f5c27f756940c463c779_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbb46a1bd8e2f5c27f756940c463c779_JaffaCakes118
-
Size
46KB
-
MD5
fbb46a1bd8e2f5c27f756940c463c779
-
SHA1
f417d324576d8534dd3507d026f1f2ed8316a97a
-
SHA256
0d689a58c699c42c569cf065fed2fffd33abfc4e3f40314f4bf6427d588c698a
-
SHA512
16e101fd0b4a525915bba0c952e13680ee46c97f57dab83edb01931542f9e29064fd801e266c547a777e85d2939958f9138b75bb47ce0d63c22f784f2ddc0c5e
-
SSDEEP
768:Ej7V3Lb4eGKnranqzRcArJERp7x6iFFFeQgv21CXiM3iJymP0C:60exWq9cArmH7NttqjoPT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbb46a1bd8e2f5c27f756940c463c779_JaffaCakes118
Files
-
fbb46a1bd8e2f5c27f756940c463c779_JaffaCakes118.exe windows:4 windows x86 arch:x86
33bc3cb91c37d288a50459ada88bad32
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBeep
GetTopWindow
MessageBoxA
LoadIconA
ArrangeIconicWindows
GetClassLongA
IsIconic
SetFocus
CharNextA
DestroyIcon
FlashWindow
GetSystemMetrics
ShowWindow
LoadCursorA
CreateWindowExA
SetCursorPos
CharLowerA
KillTimer
ShowCursor
SetWindowTextA
GetMenuItemCount
GetDesktopWindow
ReleaseDC
GetParent
kernel32
Sleep
GlobalFindAtomA
FreeLibrary
GetProcAddress
LoadLibraryA
SetLastError
lstrcatA
GlobalDeleteAtom
GetLastError
GlobalAddAtomA
CopyFileA
AllocConsole
FindResourceA
GetConsoleOutputCP
GetCommandLineA
lstrlenA
GetConsoleCP
shell32
DragFinish
gdi32
SetTextColor
CreateCompatibleDC
GdiGetBatchLimit
GdiFlush
DeleteDC
DeleteObject
EndPage
SetBkMode
ole32
CoGetCurrentProcess
CoFreeUnusedLibraries
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ