Static task
static1
Behavioral task
behavioral1
Sample
fe1e427800d7988856b9963f754ac6dc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fe1e427800d7988856b9963f754ac6dc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe1e427800d7988856b9963f754ac6dc_JaffaCakes118
-
Size
5.2MB
-
MD5
fe1e427800d7988856b9963f754ac6dc
-
SHA1
fa51e60dbb1af7e48d7f3d2bc5f5cf8923096c25
-
SHA256
3d1d0fcd518d2f50875773e8d464e5f360dc4887ab79bb8a0b9c1bc5b0afa0f5
-
SHA512
32a778436908773853d23105c806d747bfcd55431d64ae9d3924f7b80c771337d82c95de71cd6d3b2e4ee9723a7aac9cebe9dd86248d5040bc7d9b496c79739e
-
SSDEEP
3072:KQKMuIrapwdG1o8ahFjxxoBRxFBKi3ea7nP:ahIruwd7hFjcZFBKbarP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe1e427800d7988856b9963f754ac6dc_JaffaCakes118
Files
-
fe1e427800d7988856b9963f754ac6dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
232570ae053c47c83ec2645a51af2a57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
kernel32
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetSystemDirectoryA
GlobalFindAtomA
HeapAlloc
LoadLibraryA
OpenProcess
Process32First
Process32Next
GetLocalTime
SetFileTime
Sleep
VirtualAllocEx
WriteProcessMemory
_llseek
_lread
_lwrite
lstrcatA
lstrcmpiA
lstrlenA
GetFileTime
GetCommandLineA
ExitProcess
CreateToolhelp32Snapshot
CreateRemoteThread
CreateFileA
CopyFileA
CloseHandle
SetCurrentDirectoryA
advapi32
OpenSCManagerA
StartServiceA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
CreateServiceA
imagehlp
MapFileAndCheckSumA
Sections
Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE