Static task
static1
Behavioral task
behavioral1
Sample
fc598ee4afc7b588790a5016b7162024_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc598ee4afc7b588790a5016b7162024_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc598ee4afc7b588790a5016b7162024_JaffaCakes118
-
Size
537KB
-
MD5
fc598ee4afc7b588790a5016b7162024
-
SHA1
2b94253c59c3b4d1991932c7de9ee0fc052fad68
-
SHA256
f08852d074134a942591b4080b4ce5dc04d3667b85ee58d7f8b6f7cce90f97ca
-
SHA512
b6cac1883592ab04faa907d68bdcbbb2284923f0c4805bb80e44892e93d64f33803b687ab59550411efb13870b50b444f797baafc018fb821c09ca58f4331df7
-
SSDEEP
12288:+c4ulnsgtJY69ATKiGcZEtcpA81Ryl2hrhLGrktTENGUU:+/uBLm69A2PcpA8mEhNLGrRGUU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc598ee4afc7b588790a5016b7162024_JaffaCakes118
Files
-
fc598ee4afc7b588790a5016b7162024_JaffaCakes118.exe windows:4 windows x86 arch:x86
c831efe306a6df42227f48c09249f33a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
user32
TrackPopupMenuEx
GetQueueStatus
RegisterClassExA
RegisterClassA
ModifyMenuA
GetMessageExtraInfo
DispatchMessageA
LookupIconIdFromDirectory
GetScrollBarInfo
RegisterHotKey
FindWindowExW
EnumWindows
PostQuitMessage
SetThreadDesktop
ImpersonateDdeClientWindow
GetNextDlgGroupItem
EnumClipboardFormats
LoadIconA
DispatchMessageW
WinHelpW
kernel32
IsValidLocale
WideCharToMultiByte
CreateMutexA
CreateFileA
GetEnvironmentStrings
OpenMutexA
LeaveCriticalSection
OutputDebugStringA
IsBadReadPtr
SetConsoleCtrlHandler
InitializeCriticalSection
EnumSystemLocalesA
OutputDebugStringW
TlsGetValue
SetUnhandledExceptionFilter
LoadLibraryW
GetModuleFileNameA
InterlockedIncrement
GetCurrentProcess
GetTimeFormatA
lstrlenA
SetStdHandle
SetFilePointer
VirtualFree
TlsSetValue
GetLocaleInfoA
DebugBreak
GetModuleHandleA
HeapReAlloc
GetCommandLineW
VirtualQuery
TlsAlloc
GetFileType
GetCurrentProcessId
HeapAlloc
GetStringTypeW
FreeLibrary
WriteConsoleA
GetLocaleInfoW
GetDateFormatA
UnhandledExceptionFilter
GetConsoleMode
GetACP
HeapSize
WriteConsoleW
GetVersionExA
OpenFile
WaitForMultipleObjects
TlsFree
GetUserDefaultLCID
InterlockedDecrement
GetCommandLineA
RaiseException
GetCPInfo
GetTickCount
SetLastError
GetStringTypeA
GetCurrentThreadId
GetConsoleOutputCP
LCMapStringW
InterlockedExchange
GetStartupInfoA
HeapCreate
GetProcessHeap
GetCurrentThread
GetConsoleCP
GetModuleFileNameW
GetTimeZoneInformation
TerminateProcess
FlushFileBuffers
LCMapStringA
RtlUnwind
GetStdHandle
HeapValidate
GetSystemTimeAsFileTime
SetHandleCount
WriteFile
EnterCriticalSection
ReadFile
MultiByteToWideChar
FreeEnvironmentStringsA
GetProcAddress
VirtualAlloc
HeapFree
LoadLibraryA
GetEnvironmentStringsW
CompareStringA
IsValidCodePage
QueryPerformanceCounter
FreeEnvironmentStringsW
DeleteCriticalSection
HeapDestroy
GetOEMCP
GetStartupInfoW
GetLastError
ExitProcess
IsDebuggerPresent
SetEnvironmentVariableA
CompareStringW
CloseHandle
Sections
.text Size: 303KB - Virtual size: 303KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 175KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ