Static task
static1
Behavioral task
behavioral1
Sample
fd206b1638155f9ecad08aa2507bbd00_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fd206b1638155f9ecad08aa2507bbd00_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd206b1638155f9ecad08aa2507bbd00_JaffaCakes118
-
Size
473KB
-
MD5
fd206b1638155f9ecad08aa2507bbd00
-
SHA1
ab52f8936b60f0d8ccadee80198fd7ac25429e5f
-
SHA256
e179495dfd7c947e340b5dd3d82d062ffff31c63eebad559f9f64714724d08d5
-
SHA512
3ce7d73c9138ed1386fa95c96dc64d72b71990a33983f317b50e0a502adc306b91c0c9cbc192b953f4c5e6320ad8723378de08819e6f9b34c85355052621f544
-
SSDEEP
12288:D3NmVqFhck+XnwoBtAXVaY7odLSJbQW+k+qN:v4NXqVOLSJF3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd206b1638155f9ecad08aa2507bbd00_JaffaCakes118
Files
-
fd206b1638155f9ecad08aa2507bbd00_JaffaCakes118.exe windows:5 windows x86 arch:x86
2b30b5432910bc48e74fa76b7b45fd88
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapSize
GetLastError
GetProcAddress
LoadLibraryA
HeapReAlloc
HeapFree
VirtualFree
VirtualAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
WideCharToMultiByte
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeW
GetModuleFileNameW
GetStartupInfoW
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
UnhandledExceptionFilter
GetCommandLineW
Sleep
ExitProcess
FindAtomW
GetStdHandle
GetModuleFileNameA
RtlUnwind
AddConsoleAliasW
GetCurrentProcess
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapCreate
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
GetStartupInfoA
GetProcessHandleCount
GetSystemInfo
LoadLibraryExW
user32
CreateWindowExW
DefWindowProcW
DispatchMessageW
GetMessageW
RegisterClassExW
TranslateMessage
AdjustWindowRect
Sections
.text Size: 201KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ