Static task
static1
Behavioral task
behavioral1
Sample
fc639a18d6d7762ca71585822c6784ff_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc639a18d6d7762ca71585822c6784ff_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc639a18d6d7762ca71585822c6784ff_JaffaCakes118
-
Size
268KB
-
MD5
fc639a18d6d7762ca71585822c6784ff
-
SHA1
9a1d7cd88a0879c2ad780dfc5aff94f41069baa1
-
SHA256
0169993e844f6c6e6bbc123a202c8df51d083cb7b17d9b6eb9b233a9accb95e9
-
SHA512
48eb44d70def1f97ae6d6aefa754fd0665d68b4e527a293ced7d2c7c512270f154a0b9b8f3beda8086173e9ec74c115f239a19f95aa67dbe9d4a48958be92027
-
SSDEEP
3072:iJc5P7hJKjhJktxPX4Jd5GT6Ik7P1Q4ud5rPB8Ia46eTH/+lmI:i6XtPX4JGmPZud5rPS146eTH/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc639a18d6d7762ca71585822c6784ff_JaffaCakes118
Files
-
fc639a18d6d7762ca71585822c6784ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
6613c61e91d6b87b094573379c70faaa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
CopyFileW
DeleteFileA
DeleteFileW
MoveFileA
MoveFileW
GetFileAttributesA
GetFileAttributesW
SetFileAttributesA
SetFileAttributesW
RemoveDirectoryA
RemoveDirectoryW
CreateDirectoryA
CreateDirectoryW
CreateFileW
SetFileTime
SetFilePointer
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
GetVersionExA
GetFileSize
LCMapStringA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
VirtualAlloc
HeapReAlloc
HeapAlloc
SetConsoleCtrlHandler
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetModuleHandleA
GetPrivateProfileStringA
WritePrivateProfileStringA
WriteFile
ReadFile
TlsAlloc
TlsGetValue
CreateFileA
SetNamedPipeHandleState
TlsSetValue
CreateProcessW
CreateProcessA
WaitForSingleObject
CloseHandle
GetSystemDirectoryA
GetModuleFileNameA
lstrlenA
CreateMutexA
GetLastError
CreateThread
Sleep
FreeLibrary
LoadLibraryA
LoadLibraryExA
GetProcAddress
FindClose
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
IsBadWritePtr
IsBadReadPtr
HeapValidate
SetHandleCount
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
LCMapStringW
user32
MessageBoxA
DestroyWindow
BeginPaint
EndPaint
PostQuitMessage
DefWindowProcA
FindWindowA
SendMessageA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
gdi32
TextOutA
advapi32
EnumServicesStatusW
EnumServicesStatusA
OpenSCManagerW
OpenSCManagerA
RegEnumValueW
RegEnumValueA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegEnumKeyExW
RegEnumKeyExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegCloseKey
RegSetValueExW
RegSetValueExA
RegDeleteValueW
RegDeleteValueA
RegCreateKeyExW
RegCreateKeyExA
RegDeleteKeyW
RegDeleteKeyA
Sections
.text Size: 216KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ