Static task
static1
Behavioral task
behavioral1
Sample
fd208db74e075314ce9c1cde0a4f0116_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd208db74e075314ce9c1cde0a4f0116_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd208db74e075314ce9c1cde0a4f0116_JaffaCakes118
-
Size
342KB
-
MD5
fd208db74e075314ce9c1cde0a4f0116
-
SHA1
4fe5bb2ce784ac9e29879d2441be8e0aa6b20af8
-
SHA256
1defa6130f9b2c0d3222558a443cdcd5eaf82e245932c9790dabd600be135c35
-
SHA512
305426e40e2667caafead793e46271aed356c135cedc4ad02efabb05a3bebaa8f2f3fd630412102259cb92cad402bc69d4ef4dc62e2be7715bda9a1606905973
-
SSDEEP
6144:ssTDt3YveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gT3LuPbNNi0H:suYvDsakbClM2pxYB3CuM/xCSBwM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd208db74e075314ce9c1cde0a4f0116_JaffaCakes118
Files
-
fd208db74e075314ce9c1cde0a4f0116_JaffaCakes118.exe windows:4 windows x86 arch:x86
0feb01bcec3d86640f7b4a49726d6e06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingA
CloseHandle
GetModuleHandleA
lstrlenA
IsDebuggerPresent
GetConsoleCP
GetStdHandle
GlobalUnlock
FindClose
IsBadReadPtr
LocalFree
LoadLibraryExA
CreateEventA
HeapCreate
FreeEnvironmentStringsA
GlobalLock
GetLastError
CreateFileA
CreateMailslotA
GetACP
user32
DialogBoxParamA
GetDlgItem
IsMenu
GetMessageA
DispatchMessageA
GetDlgItemTextA
RedrawWindow
GetListBoxInfo
SetFocus
GetDC
EndDialog
CheckMenuItem
GetIconInfo
DrawIconEx
uxtheme
EnableTheming
CloseThemeData
DrawThemeIcon
GetThemeMetric
GetThemeColor
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ