Static task
static1
Behavioral task
behavioral1
Sample
fd10c5823e0e77ff727382d655183fd9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd10c5823e0e77ff727382d655183fd9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd10c5823e0e77ff727382d655183fd9_JaffaCakes118
-
Size
82KB
-
MD5
fd10c5823e0e77ff727382d655183fd9
-
SHA1
32054feafaf9d99d0d2db376de4e7bc45786d8c4
-
SHA256
3305981cada8f30bb1ab11a1d04b2b0482a4f5a0f2292c11b1e6f0b8bc52dbbd
-
SHA512
a5ec2e7d29051716cdf12afe981518ce0445541184e006902d08fc769227529269268b8d1f79e8a2359e5588e8cd776a9df15c88bac28bc7575eae8ea30ed0f4
-
SSDEEP
1536:JJ2mxg1TUTuZuohELg4H5ELUSNDxVOuw4Ud:JJ+1UTSuohAn5EbDx4u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd10c5823e0e77ff727382d655183fd9_JaffaCakes118
Files
-
fd10c5823e0e77ff727382d655183fd9_JaffaCakes118.exe windows:4 windows x86 arch:x86
6d047484ed8cc942f0e37af70fda8219
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
lstrlenA
GetCurrentProcess
FreeLibrary
LoadLibraryA
GetModuleFileNameA
GetFileAttributesA
CloseHandle
CreateFileA
GetSystemDirectoryA
GetVersion
DeleteFileA
WriteFile
ReadFile
CreateProcessA
GetStartupInfoA
CreatePipe
GetEnvironmentVariableA
GetShortPathNameA
lstrcmpiA
GetWindowsDirectoryA
SetStdHandle
RtlUnwind
GetCommandLineA
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetLastError
SetFilePointer
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
FlushFileBuffers
user32
wsprintfA
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE