Static task
static1
Behavioral task
behavioral1
Sample
fdb7408c370b3778fd7cffcb02116ba1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdb7408c370b3778fd7cffcb02116ba1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdb7408c370b3778fd7cffcb02116ba1_JaffaCakes118
-
Size
284KB
-
MD5
fdb7408c370b3778fd7cffcb02116ba1
-
SHA1
d597e2d622017f2091b7abb657b85498ae12f8ca
-
SHA256
2a96a8f20bb83a4bdcb425fbd15b8217e941f030951d230e790bed786d42758e
-
SHA512
c996a0ee7e6f60783c4e15d4e039514601cd5ad8ea2d3943b14caa2a42649b578bada3c1cbd0a964849383118107e3c3ed358b49300ea69173ccbbdaffebb0b2
-
SSDEEP
6144:V0lJsa0dPA4NNXw0hlx1qepW2cV4/LoDgCJM9/fACv:+DzklN9zx1qGMV4/LT79Zv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdb7408c370b3778fd7cffcb02116ba1_JaffaCakes118
Files
-
fdb7408c370b3778fd7cffcb02116ba1_JaffaCakes118.exe windows:4 windows x86 arch:x86
cbeb3549126b8d59fb9773bc91f8e52e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
kernel32
LocalFree
FindAtomA
GetCurrentDirectoryW
CreateDirectoryW
GetModuleFileNameW
SetLastError
GetModuleHandleA
LocalAlloc
VirtualProtect
DuplicateHandle
GetCurrentThreadId
GetCurrentProcess
GetFileInformationByHandle
SetEnvironmentVariableW
OutputDebugStringA
EnumResourceLanguagesA
MultiByteToWideChar
GetFileAttributesW
SearchPathW
GetStringTypeExW
OutputDebugStringW
WideCharToMultiByte
lstrcmpiW
ExitProcess
lstrlenW
VirtualQuery
InterlockedExchange
shlwapi
StrRetToStrA
PathIsContentTypeA
SHCreateStreamOnFileEx
PathIsFileSpecA
PathAppendA
PathCreateFromUrlW
oleacc
CreateStdAccessibleObject
Sections
.text Size: 139KB - Virtual size: 271KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ