Static task
static1
Behavioral task
behavioral1
Sample
fcb7c02edb709bc1cc64e40f716096d3_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fcb7c02edb709bc1cc64e40f716096d3_JaffaCakes118
-
Size
103KB
-
MD5
fcb7c02edb709bc1cc64e40f716096d3
-
SHA1
8f706d5ff17ff67725315b5b15021e2b458add2b
-
SHA256
57873528111d1c30335a8ef80f6a275976414eeda4ee68e95b4b88cec8a837e3
-
SHA512
81f9983f03e9efd2c0c2b5c5334cc40ce31da76986f1744aafbed332609384c4bfe9f2a8a351e4ff7d52c3b0f709ef691b74e79cdfa425df6192fa43bb18b077
-
SSDEEP
1536:nEkWq8gjmcp7qAnFqQIpHyaXCaAUQZ8hylU6T6FmENQ3t:iq8DQvcpSayaAR2hylU6T6AEe3t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcb7c02edb709bc1cc64e40f716096d3_JaffaCakes118
Files
-
fcb7c02edb709bc1cc64e40f716096d3_JaffaCakes118.exe windows:5 windows x86 arch:x86
ed22eff49c2a6e5cbd76c8fce6c923db
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_onexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
fclose
fread
malloc
ftell
fseek
fopen
memmove
??3@YAXPAX@Z
__dllonexit
??2@YAPAXI@Z
psapi
GetModuleFileNameExA
kernel32
TerminateProcess
GetStartupInfoA
VirtualAlloc
VirtualProtect
LoadLibraryA
IsBadReadPtr
WaitForSingleObject
CreateThread
SetLastError
ExitProcess
GetProcAddress
GetModuleHandleA
GetCurrentProcess
GetLastError
FindResourceExA
LockResource
LoadResource
FindResourceA
SetUnhandledExceptionFilter
IsDebuggerPresent
UnhandledExceptionFilter
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 722B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ