Static task
static1
Behavioral task
behavioral1
Sample
fbb6aefa0eb395c3c0c1fc5436e4613e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fbb6aefa0eb395c3c0c1fc5436e4613e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbb6aefa0eb395c3c0c1fc5436e4613e_JaffaCakes118
-
Size
16KB
-
MD5
fbb6aefa0eb395c3c0c1fc5436e4613e
-
SHA1
1f7b8a38ff7178e2629a9ab9d1b41ffe22a0ec20
-
SHA256
0c0b8b85cfe09412a98c5f2178f7d2612cd03331ca741cde1e2245d2b3a6b27c
-
SHA512
b3bd09f2bf742dda9500c15dace502712e31192d1d970f71589b900b4eaad6c2ef9e001ce0b33d64c699e04962559913b660296bc5d09c7404e9e33950ee0a27
-
SSDEEP
192:X7E7sCMfvJrMPRVFMumluLrWEV6P1NbUqwKtxy3tDmfJdLFUSiZKq0Bckv1C:rwMfJMpYLls1yhdLuSlBBc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbb6aefa0eb395c3c0c1fc5436e4613e_JaffaCakes118
Files
-
fbb6aefa0eb395c3c0c1fc5436e4613e_JaffaCakes118.exe windows:1 windows x86 arch:x86
313a383c9ffd446a1d956ebd8fbe8a9a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW
gdi32
CreatePen
EnumICMProfilesW
Chord
DPtoLP
ExcludeClipRect
BitBlt
Arc
shell32
SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW
kernel32
GetStringTypeW
GetModuleHandleW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle
Sections
����t Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE