Static task
static1
Behavioral task
behavioral1
Sample
fdde216b1d5049be450b5dbf76549a2b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdde216b1d5049be450b5dbf76549a2b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdde216b1d5049be450b5dbf76549a2b_JaffaCakes118
-
Size
5.0MB
-
MD5
fdde216b1d5049be450b5dbf76549a2b
-
SHA1
5baae5cddc83ca630933489fba3b7712f68720cf
-
SHA256
76f51d24524a00bc88a8d7de86ee2b9a1379446c7228048cc527f67d32251399
-
SHA512
ecbc200d4e9996c46deb7284f247455ea1b4cd5688f0ecfd45d0cf32085c831fd7bbd40c5c58378487a74e59d77eaa11905bc8a2d37afdc079a26f1e121c4e0a
-
SSDEEP
49152:qRV5vVjM1HQJCdzXgxqOo3GJYZonSu81kMkc4BNgJlAuEBf7e+grDxAMpkCSANVL:MVjMuIdzI5Y2HnMkaMGAuEBvgKvDc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdde216b1d5049be450b5dbf76549a2b_JaffaCakes118
Files
-
fdde216b1d5049be450b5dbf76549a2b_JaffaCakes118.exe windows:4 windows x86 arch:x86
d0602f23a95b9aba04f62af39ed6cff6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GlobalReAlloc
GetTempPathA
WriteFile
CloseHandle
GetFileType
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
CreateProcessA
lstrlenA
ExitProcess
FreeLibrary
GlobalAlloc
GetModuleFileNameA
LoadLibraryA
GetWindowsDirectoryA
DeleteFileA
GetExitCodeProcess
Sleep
GetCurrentDirectoryA
GetCommandLineA
AreFileApisANSI
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
ReadFile
SetFilePointer
GetFileSize
FormatMessageA
FindFirstFileA
FindNextFileA
CreateDirectoryA
FindClose
user32
MessageBoxA
wsprintfA
shell32
ShellExecuteExA
advapi32
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ