Static task
static1
Behavioral task
behavioral1
Sample
fd8cb6c8c4758adcab963def20ebc465_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd8cb6c8c4758adcab963def20ebc465_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd8cb6c8c4758adcab963def20ebc465_JaffaCakes118
-
Size
84KB
-
MD5
fd8cb6c8c4758adcab963def20ebc465
-
SHA1
34f6743baf24c9f33bc35795fdd9cefd37894779
-
SHA256
083cad06520941b6297bc96c131835ef6ab191ac21b450b1ceeb5eec1db62cb4
-
SHA512
8831abdd26b3548ab9520c5ce732c1fbfe4c39914aee159a03926e3462ef7115e252f34e919955500e40a78cb9b80e69807c4759d62f769546e85b6104a1c052
-
SSDEEP
768:mbBR1mrig77ZNWZy3D1etUQQNLM/HPx6Q7U/cQCKv4AW+U6:eB3Gig77Lh3otJQNWvJg/MKhW8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd8cb6c8c4758adcab963def20ebc465_JaffaCakes118
Files
-
fd8cb6c8c4758adcab963def20ebc465_JaffaCakes118.exe windows:4 windows x86 arch:x86
6804336190e7262385d05a42933ee282
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyIcon
GetFocus
GetWindowTextA
DialogBoxParamA
CloseWindow
EndDialog
CreateIcon
DrawIconEx
GetCursor
DrawIcon
CalcMenuBar
AppendMenuW
InsertMenuA
IsWindow
CopyRect
CopyImage
DialogBoxParamW
AlignRects
GetDlgItem
GetFocus
IsWindow
CopyImage
GetCursor
LoadMenuA
AlignRects
LoadCursorA
GetMenu
DialogBoxParamW
DrawTextA
AppendMenuW
CloseWindow
GetCursor
CalcMenuBar
AppendMenuA
DrawIconEx
BlockInput
CopyRect
EndDialog
CopyImage
CreateIcon
GetFocus
DrawTextA
AppendMenuW
GetDlgItem
gdi32
AddFontResourceA
RestoreDC
ExtTextOutA
GetClipBox
CloseMetaFile
SetTextColor
BeginPath
GetBitmapBits
DeleteObject
CopyMetaFileA
ClearBrushAttributes
GetCurrentPositionEx
GetBrushOrgEx
AddFontResourceW
AddFontResourceTracking
BitBlt
CreateSolidBrush
AddFontResourceW
ExtTextOutA
ClearBitmapAttributes
AddFontResourceExA
DeleteObject
AddFontResourceTracking
AddFontMemResourceEx
GetPixel
GetClipBox
GetBitmapBits
SetTextColor
GetCurrentPositionEx
AbortPath
CopyMetaFileA
comctl32
ImageList_AddMasked
ImageList_GetDragImage
ImageList_Destroy
ImageList_Copy
ImageList_Draw
ImageList_ReplaceIcon
ImageList_DragMove
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_DrawEx
ImageList_LoadImageA
ImageList_GetIcon
ImageList_LoadImage
ImageList_DrawIndirect
ImageList_Remove
ImageList_LoadImageW
ImageList_Merge
ImageList_Create
ImageList_GetImageRect
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_DragEnter
ImageList_DrawIndirect
ImageList_AddIcon
ImageList_Remove
ImageList_ReplaceIcon
ImageList_BeginDrag
ImageList_DragLeave
ImageList_LoadImageA
ImageList_Read
kernel32
ExitThread
GetFileTime
CreateDirectoryA
SetLastError
CreateProcessA
DeleteFileW
CopyFileExA
GetCommandLineA
FindAtomA
CreateThread
Sleep
WriteFile
CopyFileA
GetLastError
GetComputerNameA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ