Static task
static1
Behavioral task
behavioral1
Sample
fcb19c568fd36357045024e5c6730f39_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcb19c568fd36357045024e5c6730f39_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fcb19c568fd36357045024e5c6730f39_JaffaCakes118
-
Size
27KB
-
MD5
fcb19c568fd36357045024e5c6730f39
-
SHA1
a1b2213e536888425374eb3a45d5e78c05eecd8f
-
SHA256
3161db08d212bafdc07e3e26c29939716538f3160a43f6a03b185c4a457bd496
-
SHA512
fb27e2ad1e88aa6fb017b293a295050f09187f50e207191fcffb87476ba73eb8e230c2a858e1320243a2318ab19213410bb11c83ebef65b347e3e868939b16a8
-
SSDEEP
384:/xgSeFKd110vwQtVDCOyZ3bGFVKgZbf9YlRr/ylxYSs/Lg1hi9fCSQ/yRluUl:5pewQ/OOyF0PZbVYDyHPxTi1Xl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcb19c568fd36357045024e5c6730f39_JaffaCakes118
Files
-
fcb19c568fd36357045024e5c6730f39_JaffaCakes118.exe windows:4 windows x86 arch:x86
3be07eec2e5ef6068dbab6eaa1ac2377
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
GetProcAddress
GetModuleHandleA
GetLastError
FreeLibrary
WideCharToMultiByte
CreateFileA
WaitForSingleObject
LoadResource
Sleep
CloseHandle
DeleteFileA
GetFileAttributesA
ExitThread
GetModuleFileNameA
lstrcpyA
lstrcatA
CreateEventA
FindResourceA
ExitProcess
Process32First
LoadLibraryA
CreateToolhelp32Snapshot
CompareStringA
lstrcmpA
lstrlenA
SetEvent
LoadLibraryW
ResetEvent
WaitForMultipleObjects
CreateThread
WriteFile
user32
TranslateMessage
BeginPaint
DispatchMessageA
SetThreadDesktop
PeekMessageA
CreateWindowExA
ShowWindow
CreateDesktopA
MsgWaitForMultipleObjects
DestroyWindow
wsprintfA
advapi32
RegOpenKeyExA
RegLoadKeyW
RegOpenKeyA
RegQueryValueExA
RegSaveKeyA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
RegNotifyChangeKeyValue
ole32
CoInitialize
CoUninitialize
shell32
SHGetFolderPathA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ