Static task
static1
Behavioral task
behavioral1
Sample
fbf7cb8255e0c45f495253bda6a1218c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fbf7cb8255e0c45f495253bda6a1218c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbf7cb8255e0c45f495253bda6a1218c_JaffaCakes118
-
Size
185KB
-
MD5
fbf7cb8255e0c45f495253bda6a1218c
-
SHA1
6db151f60ed54766e29be31e76fa28cc5a887f4b
-
SHA256
b3d59ec2129c0a164c67701780f910bdca9393b6906b41680b5ee175773de1cb
-
SHA512
bc65849a51a422ede6ff3e7ce2332018e21acd36779a95cf864fb1352a1981499277548c164d07da71e0a6a3635d770913bd6c7d4e34de42fa949a1a42ca49a1
-
SSDEEP
3072:qi6jjTAp1Hcfg4+4YiDEu16CnANtgqovrOEC3DTuTDfgshF0O:qVIwg4Ku6nx/A/fphF0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbf7cb8255e0c45f495253bda6a1218c_JaffaCakes118
Files
-
fbf7cb8255e0c45f495253bda6a1218c_JaffaCakes118.exe windows:4 windows x86 arch:x86
1d59f3a79a6e8e1fd936497fdbaaebf1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetActiveWindow
AdjustWindowRectEx
GetTopWindow
IntersectRect
SetForegroundWindow
GetNextDlgGroupItem
UpdateWindow
GetPropW
IsRectEmpty
GetMessageTime
IsWindow
GetWindowPlacement
CallWindowProcW
GetClassInfoW
DefWindowProcW
InvalidateRgn
SendDlgItemMessageA
CreateWindowExW
SetPropW
IsChild
GetMenu
CopyAcceleratorTableW
MessageBeep
RegisterWindowMessageW
IsIconic
WinHelpW
GetClassLongW
GetForegroundWindow
GetMessagePos
OffsetRect
GetNextDlgTabItem
RemovePropW
RegisterClassW
LoadIconW
CharNextW
SetRect
EqualRect
GetClassInfoExW
GetClientRect
CharUpperW
MapWindowPoints
InvalidateRect
DestroyMenu
kernel32
FindClose
DeleteFileW
GetLocaleInfoW
lstrcmpiA
GetCalendarInfoA
InterlockedExchange
FindFirstFileW
FreeLibrary
lstrcpyW
CloseHandle
LockResource
FindResourceW
EnumResourceLanguagesW
LoadResource
GetVersionExW
GetCurrentDirectoryW
CreateMutexW
SetFilePointer
GetLocaleInfoA
LocalFileTimeToFileTime
SetThreadContext
GetCurrentProcessId
WideCharToMultiByte
RaiseException
GetModuleHandleW
SystemTimeToFileTime
WaitForSingleObject
VirtualFree
GetACP
GetFileAttributesW
EnumResourceNamesA
InitializeCriticalSection
DeleteCriticalSection
WriteFile
ConvertDefaultLocale
GetModuleFileNameW
MoveFileW
GetVersion
FindNextFileW
SetFileTime
CreateFileW
ExitProcess
MultiByteToWideChar
CreateDirectoryW
InterlockedDecrement
GetSystemDefaultLangID
GetProcAddress
RemoveDirectoryW
ReleaseMutex
ReadFile
SizeofResource
LoadLibraryW
GetThreadLocale
lstrcmpA
gdi32
SetViewportOrgEx
SetTextColor
GetDeviceCaps
Escape
GetStockObject
GetMapMode
SetViewportExtEx
SaveDC
GetViewportExtEx
GetObjectW
OffsetViewportOrgEx
GetBkColor
RestoreDC
SetWindowExtEx
SelectObject
ScaleWindowExtEx
SetMapMode
RectVisible
SetBkColor
DeleteDC
TextOutW
GetRgnBox
GetClipBox
ExtSelectClipRgn
ExtTextOutW
CreateBitmap
GetWindowExtEx
ScaleViewportExtEx
PtVisible
DeleteObject
GetTextColor
CreateRectRgnIndirect
shell32
SHCreateDirectoryExW
SHGetSpecialFolderPathW
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
RegSetValueExW
RegCreateKeyExW
RegEnumKeyExW
RegEnumKeyW
RegQueryValueW
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenKeyW
RegCloseKey
RegDeleteKeyW
RegQueryValueExW
ole32
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
CoInitialize
OleInitialize
CoUninitialize
StgCreateDocfileOnILockBytes
CLSIDFromProgID
OleUninitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
OleFlushClipboard
CoGetClassObject
CoTaskMemFree
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
CoCreateInstance
CoRevokeClassObject
CLSIDFromString
oledlg
OleUIBusyW
shlwapi
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathFileExistsW
PathRemoveFileSpecW
PathAppendW
Sections
.text Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ