Static task
static1
Behavioral task
behavioral1
Sample
fcfc8de027ec53f3089d101bbd6d3529_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fcfc8de027ec53f3089d101bbd6d3529_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fcfc8de027ec53f3089d101bbd6d3529_JaffaCakes118
-
Size
51KB
-
MD5
fcfc8de027ec53f3089d101bbd6d3529
-
SHA1
c3d615be446ced7c9c46726ed4d553ee636d0afa
-
SHA256
e6a0dd6117b216a4ae880bac7dd3ff410d6ea70eaa2b5bb8c56d7fed2288ccb3
-
SHA512
a1f34502095418b211bd6fa79a6eb00c3cb9a3872c5b9dcffa1c7167255f740045f22634732b8cdf03bfa8bd6c7e286f022ef97f102e1fbe40aa8f3c4a9f760d
-
SSDEEP
384:TR757ZUigtTMNeLNek+vD2i1yP1A68Hvch0D85F/g:TRF7yt9dAvvchr/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcfc8de027ec53f3089d101bbd6d3529_JaffaCakes118
Files
-
fcfc8de027ec53f3089d101bbd6d3529_JaffaCakes118.exe windows:4 windows x86 arch:x86
60ba764195d1ebee175aa6d420ec3ccc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SearchPathA
PulseEvent
CloseHandle
SetEvent
TlsGetValue
AddAtomA
Sleep
GetModuleHandleA
VirtualProtect
ExitProcess
GetLastError
HeapDestroy
lstrcmpiA
DeleteCriticalSection
ResumeThread
GetDiskFreeSpaceA
GetTickCount
CreateThread
GetComputerNameA
ReleaseMutex
user32
CopyIcon
GetScrollBarInfo
GetKeyState
EnableWindow
EndDialog
CreateMenu
CreateWindowExA
DragDetect
CopyImage
DialogBoxParamA
DispatchMessageA
CloseWindow
GetMessageA
IsIconic
hlink
HlinkTranslateURL
HlinkIsShortcut
HlinkResolveShortcut
HlinkNavigate
HlinkClone
shell32
DragQueryFileA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE