Static task
static1
Behavioral task
behavioral1
Sample
fd89a9fb23376d57089020b79f76e7ca_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd89a9fb23376d57089020b79f76e7ca_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd89a9fb23376d57089020b79f76e7ca_JaffaCakes118
-
Size
147KB
-
MD5
fd89a9fb23376d57089020b79f76e7ca
-
SHA1
e4ef52e5b827454176e140ca45cc1fd71ed63b65
-
SHA256
96a4c6e389046561363fbe35ce16ca1aee20608c85efa9648f0144c232de4655
-
SHA512
bdea29cea22f46a72ff8844ad614b104335882b5e91908a6c2958ee7df512e7435783391b95b5ef891fc9d6eb44308da34e38a6d6979fba195cb4723c011550a
-
SSDEEP
3072:iizZFNJorbOiBiEUlyYWHG9LITZI9Oive12DcbJds1uj3Gw/o:HVFNeRrHGJr1G12DOJegj35/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd89a9fb23376d57089020b79f76e7ca_JaffaCakes118
Files
-
fd89a9fb23376d57089020b79f76e7ca_JaffaCakes118.exe windows:5 windows x86 arch:x86
e3a26f95e0c58ab42f248594561b55b6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommMask
SetLocalPrimaryComputerNameA
VirtualAllocEx
GetDllDirectoryA
EnumSystemLanguageGroupsA
OpenWaitableTimerA
IsBadStringPtrA
WriteProfileStringA
SetUnhandledExceptionFilter
GetComputerNameA
HeapAlloc
GetLongPathNameW
GetComputerNameA
SetHandleCount
GetCommandLineA
user32
EnumChildWindows
RegisterDeviceNotificationA
CliImmSetHotKey
SetMenuItemBitmaps
EnumDesktopWindows
InsertMenuItemA
LoadAcceleratorsA
CallWindowProcA
SetMenuItemInfoA
GetAltTabInfoA
GetWindowTextLengthW
BroadcastSystemMessageExW
AppendMenuA
GetWindow
CreateWindowStationA
DrawIconEx
UnregisterDeviceNotification
GetWindowTextA
GetProgmanWindow
GetWindowLongA
MonitorFromWindow
EnumPropsExA
GetRawInputData
PrivateExtractIconExA
SetMenuItemBitmaps
GetAltTabInfoA
GetWindowWord
DrawFrameControl
GetSubMenu
OpenWindowStationA
DefWindowProcA
RegisterServicesProcess
comdlg32
GetOpenFileNameA
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ