Static task
static1
Behavioral task
behavioral1
Sample
fd9b261e460610524087711d91dcb625_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fd9b261e460610524087711d91dcb625_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd9b261e460610524087711d91dcb625_JaffaCakes118
-
Size
292KB
-
MD5
fd9b261e460610524087711d91dcb625
-
SHA1
93ec7cd1a8cdbb627364b5d2e04e5208a569bc76
-
SHA256
ce2c31c3ac64be1e0b7e6861152192324df099cda166e78ab4fda5986c418663
-
SHA512
7029f3b18dfecabb574ee89e8dd2c7eaaf563b1ec163da18ce06a532506960329fc6dd59854a71228a16f669f2f496a850dc6b95290568e0dbbd30c8a01720bb
-
SSDEEP
6144:aFZcxcR3bUaz5WwUN1EZY5haSXXqLd+AvkWEE/gFHFWNQuV9145vms:KHxyL5NXqLdvvkWEE45wGKa0s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd9b261e460610524087711d91dcb625_JaffaCakes118
Files
-
fd9b261e460610524087711d91dcb625_JaffaCakes118.exe windows:4 windows x86 arch:x86
7ff4ab2adf0b6b666e1ac599e965fa45
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
WindowFromPoint
SetWindowTextA
OpenIcon
ShowWindow
SendDlgItemMessageA
SetWindowPlacement
FindWindowExA
GetWindowThreadProcessId
AdjustWindowRectEx
GetWindowPlacement
CreateDialogParamA
GetDesktopWindow
IsWindowVisible
ole32
CoFreeUnusedLibraries
CoFileTimeNow
MonikerCommonPrefixWith
ReadClassStg
CoTaskMemRealloc
OleQueryLinkFromData
MonikerRelativePathTo
CoReleaseServerProcess
OleDraw
IIDFromString
OleNoteObjectVisible
OleSetClipboard
kernel32
IsBadWritePtr
GetModuleHandleA
SuspendThread
VirtualAlloc
SetEvent
GetExitCodeThread
ReleaseMutex
CloseHandle
ResetEvent
PulseEvent
GetProcAddress
WideCharToMultiByte
GetSystemDefaultLCID
WaitForSingleObject
VirtualUnlock
VirtualProtect
GetLocaleInfoA
GetStartupInfoA
OpenMutexA
GetOverlappedResult
GlobalReAlloc
GetNumberFormatA
GetStringTypeA
HeapReAlloc
GlobalUnlock
OpenEventA
msvcrt
__getmainargs
exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_XcptFilter
_acmdln
_exit
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 275KB - Virtual size: 383KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ