Static task
static1
Behavioral task
behavioral1
Sample
fcdb49ac380fd4e8411c7ef94dba367d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcdb49ac380fd4e8411c7ef94dba367d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fcdb49ac380fd4e8411c7ef94dba367d_JaffaCakes118
-
Size
39KB
-
MD5
fcdb49ac380fd4e8411c7ef94dba367d
-
SHA1
5f7a6a01107c1baea112548d5be13607f0a96e53
-
SHA256
0317f8c08500fe0cabccfb4838e501d3383779c5d97a504e765ffbd4cab7febb
-
SHA512
ec801602a8d9b2ea725cb6d361084be8b8c8ec50276657492b164fb9eeacd56b1a2762ad60b756746df92d70925d43c60d1caebf5ef613135997607185de807c
-
SSDEEP
768:qeRZpZo5PaYjNO9s/uYtsJCL81SPJJwxMUf8PTB+Vioy+ThMs5EuLjq:qEPGjA6/xqJlYxJwxMm8F+NtMsJL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcdb49ac380fd4e8411c7ef94dba367d_JaffaCakes118
Files
-
fcdb49ac380fd4e8411c7ef94dba367d_JaffaCakes118.exe windows:4 windows x86 arch:x86
39c5aa87787b934b191b74bed6083f95
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetFileAttributesA
GetSystemInfo
GetVersionExW
IsBadWritePtr
ReadFile
_lcreat
advapi32
BuildImpersonateTrusteeW
CryptDecrypt
CryptDuplicateHash
CryptGenRandom
DestroyPrivateObjectSecurity
GetAuditedPermissionsFromAclW
GetOldestEventLogRecord
IsValidAcl
NotifyChangeEventLog
ObjectDeleteAuditAlarmW
RegQueryValueA
SetEntriesInAclW
StartServiceA
TrusteeAccessToObjectW
user32
CallWindowProcW
CharLowerA
CharLowerBuffA
CharNextA
CharUpperBuffA
ChildWindowFromPoint
CloseWindowStation
DefMDIChildProcW
GetClipboardOwner
GetInputState
MessageBoxA
PostQuitMessage
shell32
CheckEscapesA
Control_FillCache_RunDLLW
DllInstall
DragQueryPoint
SHGetDataFromIDListA
SHGetPathFromIDListW
SHGetSpecialFolderPathW
SheGetCurDrive
SheRemoveQuotesA
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE