Static task
static1
Behavioral task
behavioral1
Sample
fbd06bdaf78d6a76b111d5238c3a55f9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fbd06bdaf78d6a76b111d5238c3a55f9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbd06bdaf78d6a76b111d5238c3a55f9_JaffaCakes118
-
Size
104KB
-
MD5
fbd06bdaf78d6a76b111d5238c3a55f9
-
SHA1
1f114415b87919723d60e04ffad218dacb508ba0
-
SHA256
5fd5e24b3ed6bdb632974baeec70fa37b4b66cafa4c4cee5094bd57dc0b1e3b3
-
SHA512
e9bf8f509c4f961d56da40cf3a21b9156d68551cf44adf11d8eefd6bf67ca6badc11b694565ccfe966eb0bb0b0b21d8a137c2fa50cc7c11121ef4bce6c1c9d29
-
SSDEEP
3072:4aQo03tPdZeVXq8xNR6tgR07WtU/Wbf8Wf:W0BXR0SUS8Wf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbd06bdaf78d6a76b111d5238c3a55f9_JaffaCakes118
Files
-
fbd06bdaf78d6a76b111d5238c3a55f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
7d1e4fd2323ccd3397e6069b63cc0f2d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ExtractIconExA
SHGetSpecialFolderPathW
ShellExecuteExA
user32
GetDesktopWindow
SetWindowPos
EndDialog
FillRect
IsWindowVisible
GetDlgItemTextA
CharPrevA
GetParent
SystemParametersInfoA
EnableWindow
DestroyWindow
RegisterClassA
DrawTextA
CharNextA
PostQuitMessage
LoadBitmapA
GetWindowTextA
CreateDialogParamA
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItem
GetClientRect
SetRect
GetWindowRect
LoadIconA
LoadCursorA
EndPaint
SetClassLongA
ScreenToClient
BeginPaint
urlmon
CreateURLMoniker
kernel32
WaitForSingleObject
GetProcessHeap
GetLocaleInfoA
IsValidCodePage
HeapAlloc
FindVolumeClose
FileTimeToLocalFileTime
FindFirstFileA
lstrcpynA
FindClose
VirtualFree
LCMapStringW
GetConsoleScreenBufferInfo
InitializeCriticalSection
GetStdHandle
SetEnvironmentVariableA
GetDriveTypeA
HeapFree
GetVolumeInformationA
GetShortPathNameA
LocalUnlock
CompareStringA
GetFileAttributesA
GetCurrentProcess
GetLocaleInfoW
GetDriveTypeA
GetVersionExA
GetConsoleMode
GetEnvironmentVariableA
GetModuleHandleA
LoadLibraryA
SetStdHandle
lstrcmpiA
SetConsoleMode
SetVolumeLabelA
GetStringTypeA
GetUserDefaultUILanguage
GetSystemTime
LCMapStringA
GetStringTypeW
LeaveCriticalSection
GetTimeZoneInformation
GetStartupInfoA
ReleaseMutex
GetFileTime
FileTimeToSystemTime
CreateMutexA
GetModuleFileNameA
GetModuleHandleExW
SetThreadPriorityBoost
GetUserDefaultLCID
HeapDestroy
VirtualAlloc
InterlockedExchange
GetFileType
SetHandleCount
CreateFileA
CompareStringW
FindNextFileA
IsValidLocale
GetFullPathNameA
HeapCreate
GetLocalTime
LocalLock
GetProcAddress
Sleep
EnumSystemLocalesA
FlushFileBuffers
WideCharToMultiByte
ExitProcess
lstrlenA
SetConsoleCtrlHandler
gdi32
GetNearestColor
OffsetClipRgn
CreateRectRgn
GetStockObject
GetClipRgn
SetBkColor
CreatePen
IntersectClipRect
SetTextColor
SelectObject
ole32
OleUninitialize
CoCreateInstance
OleInitialize
shlwapi
PathRemoveBackslashA
PathFileExistsW
SHDeleteValueA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE