Static task
static1
Behavioral task
behavioral1
Sample
fd7e8a9dcd7ff553a723ec1ca2f9b749_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd7e8a9dcd7ff553a723ec1ca2f9b749_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd7e8a9dcd7ff553a723ec1ca2f9b749_JaffaCakes118
-
Size
33KB
-
MD5
fd7e8a9dcd7ff553a723ec1ca2f9b749
-
SHA1
f25a8e33a160afb201731a694425b0fcb3d3f338
-
SHA256
8a67f532cb85b7bbd63f2b769e8eacdfbafa75d693a18584b79efde405f0be0f
-
SHA512
9b8eea87a0749af7a1d3fd63c2d50b8f196956076ad9696b1828b7a66cff670b4b9f9d5426c0f089caaa53b1250035b82d43af32c661fb39e8731382415b5690
-
SSDEEP
768:TJfxVHklfCUfOD4konb9aUzOzpr2i3YDkHoFiA:9fjHkRfAwb9vyzprhsL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd7e8a9dcd7ff553a723ec1ca2f9b749_JaffaCakes118
Files
-
fd7e8a9dcd7ff553a723ec1ca2f9b749_JaffaCakes118.exe windows:1 windows x86 arch:x86
cf8391f5b8a72f116c12ae343e22a227
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoA
lstrlenA
VirtualAlloc
GetFileAttributesW
ConnectNamedPipe
MulDiv
CreateFiber
GetDiskFreeSpaceW
GetLogicalDriveStringsA
lstrlen
Beep
GetDateFormatW
GetLogicalDriveStringsW
ExpandEnvironmentStringsW
FatalAppExitA
CompareStringW
FatalAppExitW
lstrcmp
GetLongPathNameW
InitializeCriticalSection
AddAtomA
GetCommandLineW
GetCurrentProcess
user32
LoadMenuIndirectW
LockWindowUpdate
SetWindowTextA
GetScrollPos
GetClassInfoA
SetCursor
InsertMenuItemA
CloseWindow
GetWindowLongW
CharLowerA
SetDlgItemTextA
MessageBoxIndirectW
MessageBeep
IsIconic
EndPaint
GetClassNameW
BeginPaint
gdi32
CreatePen
DeleteDC
StretchDIBits
CreateBitmapIndirect
advapi32
RegQueryValueA
RegCreateKeyW
comdlg32
ReplaceTextA
PrintDlgExW
shell32
SHGetFolderPathW
ole32
CLSIDFromString
CoDisconnectObject
CoGetPSClsid
version
VerInstallFileA
VerInstallFileW
VerLanguageNameW
VerQueryValueA
ws2_32
WSASend
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ