Static task
static1
Behavioral task
behavioral1
Sample
fbf4e5f68cc2d06441c8d8deaf329e6f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fbf4e5f68cc2d06441c8d8deaf329e6f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbf4e5f68cc2d06441c8d8deaf329e6f_JaffaCakes118
-
Size
160KB
-
MD5
fbf4e5f68cc2d06441c8d8deaf329e6f
-
SHA1
21fefe9a2ea967cfb26e43c0ad464337965edce1
-
SHA256
ec86d9257ca58e469d11dd99f0a2b501efd8c49073d35b8d4585d46f646444ed
-
SHA512
3c63e2b750de599ef3367e842c89690058228c13a03e731796804f7bfe684c43d09c7ca9d291faaa648aa5f4f3d88b40e9f3243f242dfeaff3d59cabe89f155a
-
SSDEEP
3072:BKLdNlAiU1B0meNjULM0c5os10+5m2+H9RO/WUd/2aHJzTSBV:1Luj4A0c5oalLTZ/Fp67
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbf4e5f68cc2d06441c8d8deaf329e6f_JaffaCakes118
Files
-
fbf4e5f68cc2d06441c8d8deaf329e6f_JaffaCakes118.exe windows:4 windows x86 arch:x86
b705e54f12b1df1a6f4744336bc2ee74
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
lstrcmpA
GetStringTypeA
LCMapStringW
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapFree
HeapAlloc
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
GetStringTypeW
comctl32
ord14
ws2_32
WSAGetLastError
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ