Static task
static1
Behavioral task
behavioral1
Sample
fdc06e0e97779b3b670536daed61afbf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fdc06e0e97779b3b670536daed61afbf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdc06e0e97779b3b670536daed61afbf_JaffaCakes118
-
Size
553KB
-
MD5
fdc06e0e97779b3b670536daed61afbf
-
SHA1
2759a017115af4b57721cb4177c391ea85707d00
-
SHA256
2b340ce585cab311f35e24a4051fbd95843c3ccf2ede602a7a704e7b8d8931b9
-
SHA512
326818ed08f28a17d037b294cc0ff282ee54a3fa6fd8de434999e98744331ae57af503a9779eec4562fbfa21f80b4ba0b19e9696231ddea6be1ee095b6b89658
-
SSDEEP
12288:Q95/PLX+186OI5CPsmIfjJ/o7rEfe0Qd+ZNx4u+vXIELpH9nzg:Q7PLXGO8KcecqvYY6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdc06e0e97779b3b670536daed61afbf_JaffaCakes118
Files
-
fdc06e0e97779b3b670536daed61afbf_JaffaCakes118.exe windows:4 windows x86 arch:x86
361cdb6e62587765c1a32bbb4c79e565
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
gdi32
PtVisible
GetNearestPaletteIndex
SetROP2
SetStretchBltMode
GetBitmapDimensionEx
GetWorldTransform
WidenPath
CreateDIBPatternBrush
DeleteObject
kernel32
OutputDebugStringW
LCMapStringA
CompareStringA
LeaveCriticalSection
CloseHandle
FreeLibrary
GetProfileStringA
IsBadReadPtr
OpenMutexA
GetStringTypeW
EnterCriticalSection
HeapDestroy
DeleteCriticalSection
SetUnhandledExceptionFilter
EnumSystemLocalesA
FreeEnvironmentStringsA
SetEnvironmentVariableA
FileTimeToSystemTime
GetCurrencyFormatW
HeapAlloc
SetHandleCount
CompareStringW
InterlockedDecrement
HeapReAlloc
GetCurrentProcess
GetConsoleCP
GetLocaleInfoW
GetTimeFormatA
RaiseException
SetStdHandle
GetModuleFileNameW
WriteConsoleOutputAttribute
GetConsoleTitleA
GetStartupInfoA
WriteConsoleW
GetEnvironmentStringsW
VirtualFree
InterlockedExchange
GetLastError
CreateEventA
FlushFileBuffers
HeapFree
GetCommandLineA
CreateMutexA
WriteConsoleA
GetLocaleInfoA
LCMapStringW
WideCharToMultiByte
IsDebuggerPresent
RtlUnwind
GetModuleHandleA
LoadLibraryA
lstrlenA
GetCurrentThread
VirtualQuery
OutputDebugStringA
GetProcAddress
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
IsValidLocale
GetConsoleMode
ExitProcess
SetConsoleCtrlHandler
GetModuleFileNameA
GetUserDefaultLCID
GetDateFormatA
InterlockedIncrement
DebugBreak
GetSystemTimeAdjustment
WriteFile
EnumSystemCodePagesA
HeapSize
GetStringTypeA
HeapValidate
GetProcessHeap
HeapCreate
IsValidCodePage
SetFilePointer
Sleep
GetTickCount
SetLastError
GetStdHandle
GetModuleHandleW
UnhandledExceptionFilter
CreateMailslotA
CreateFileA
QueryPerformanceCounter
TlsFree
LoadLibraryW
GetConsoleOutputCP
ReadFile
GetSystemTimeAsFileTime
GetCurrentThreadId
GetFileType
GetOEMCP
TlsAlloc
GetCurrentProcessId
TerminateProcess
TlsSetValue
GetCPInfo
FreeEnvironmentStringsW
TlsGetValue
GetACP
GetEnvironmentStrings
VirtualAlloc
user32
DdeConnectList
DefFrameProcA
ChangeMenuA
RegisterClassExA
DdeCreateDataHandle
RegisterClassA
GetPropA
advapi32
CryptGetHashParam
RevertToSelf
RegRestoreKeyA
RegEnumKeyExA
Sections
.text Size: 283KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 209KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ