Static task
static1
Behavioral task
behavioral1
Sample
fc4dff9bfa969e5ab1d668157ce73b92_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc4dff9bfa969e5ab1d668157ce73b92_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc4dff9bfa969e5ab1d668157ce73b92_JaffaCakes118
-
Size
82KB
-
MD5
fc4dff9bfa969e5ab1d668157ce73b92
-
SHA1
922cda237388e69f6095442edc51e0a84c66c080
-
SHA256
94fb8e3e3e6dbf76eeb3cce6d09e5c39943f90a637427cc26b6a4a697c162c74
-
SHA512
8d86de934cf12db995f512260557fea66c91f16622205e58e21de7a14c8293186b7a9d931b8c9b48da9249569613cb22c141b3ce6e234303f05e840869c915f0
-
SSDEEP
1536:duzVcg2hr7hfjH0xX1SpkFjA4gU5qijoCPsUzuZZNKowpVRPSpfC6C:duRcJFfjslxFjA16qi7ipBwpzV6C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc4dff9bfa969e5ab1d668157ce73b92_JaffaCakes118
Files
-
fc4dff9bfa969e5ab1d668157ce73b92_JaffaCakes118.exe windows:4 windows x86 arch:x86
1f64d00417c0239b5ee4e676306bf43a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CloseEnhMetaFile
CreateRoundRectRgn
DPtoLP
DeleteDC
EndDoc
EnumICMProfilesA
kernel32
MulDiv
SetupComm
IsBadWritePtr
GetConsoleMode
LocalFree
HeapSummary
user32
CopyRect
CallMsgFilterA
AdjustWindowRect
CreateIcon
Sections
.text Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE