Static task
static1
Behavioral task
behavioral1
Sample
fcc7d7b105036f2cacf689850b8dff80_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcc7d7b105036f2cacf689850b8dff80_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fcc7d7b105036f2cacf689850b8dff80_JaffaCakes118
-
Size
384KB
-
MD5
fcc7d7b105036f2cacf689850b8dff80
-
SHA1
735813317536a66520b2ea411c10336a686c73f1
-
SHA256
05164c603bcbd2d32155bb7ce7aec9f9d23eaa7bd221ef7d2a004c61e1fe75a5
-
SHA512
a34053d77f7002daecadb5833e9507596340ba99ce5fa1a3a39b9ad9f64fbfd156ff8e3f3c6074e5759449297c3cddc9ac1ebfdc8fdcceefb52615d08d9d9107
-
SSDEEP
6144:QqrYppT5LtJj0LuUXXK14hgSEUzLJeOLmsuPafC1PpWqMnMTh6G0NpaW:Z8jLz4L9HKyhgSEUUDrhWQyNpB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcc7d7b105036f2cacf689850b8dff80_JaffaCakes118
Files
-
fcc7d7b105036f2cacf689850b8dff80_JaffaCakes118.exe windows:4 windows x86 arch:x86
f7d887e149a17f0ccddf23c2a17278ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetMessageA
advapi32
IsValidSid
ole32
CoCreateInstance
ws2_32
connect
shlwapi
PathFileExistsA
dnsapi
DnsQuery_A
shell32
SHGetSpecialFolderPathA
msvcrt
__CxxFrameHandler
oleaut32
SafeArrayGetElemsize
Sections
.text Size: 354KB - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE