Static task
static1
Behavioral task
behavioral1
Sample
fdb2af89ffd67e6fef4cef70ea3fdbff_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdb2af89ffd67e6fef4cef70ea3fdbff_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdb2af89ffd67e6fef4cef70ea3fdbff_JaffaCakes118
-
Size
264KB
-
MD5
fdb2af89ffd67e6fef4cef70ea3fdbff
-
SHA1
9ae384223176c2ae0e9b2daf9dac6b09f2536e54
-
SHA256
3d09cb229c0318a6afd9775793d9f34435029018427f25438565fd13da0272a0
-
SHA512
1cce093a07cd78c910355abc109f7a661b4aa104493fc0d49364e962d238d27a87581c516b229caf9b60a63b162ff2e85a387b8fa5b102c40fa6489174065e70
-
SSDEEP
6144:k/qf4cr3qwF1GVFiADdBHQNQ6+5XpwaB2pxu:k/HBe0Bwe5XNSxu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdb2af89ffd67e6fef4cef70ea3fdbff_JaffaCakes118
Files
-
fdb2af89ffd67e6fef4cef70ea3fdbff_JaffaCakes118.exe windows:5 windows x86 arch:x86
cb5bc4d6ebb5cbe899921a1e9c2e102c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntExW
StrCSpnW
kernel32
LoadLibraryA
VirtualAlloc
GetProcAddress
Sections
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 257KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ