Static task
static1
Behavioral task
behavioral1
Sample
fe0d9bf1ac58df04253578d97d9f1841_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe0d9bf1ac58df04253578d97d9f1841_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe0d9bf1ac58df04253578d97d9f1841_JaffaCakes118
-
Size
227KB
-
MD5
fe0d9bf1ac58df04253578d97d9f1841
-
SHA1
1a267079ad53a39302ed15ae28e599071e4d2ecb
-
SHA256
2ec7e6ed168c0daac1eb1f03e8c582aaa5a74e14d33cd483948077b96eec5ed9
-
SHA512
a6789810f5cba29366e4025f8c088a6d66136cb97b3f82e76bf68f8751510c0e6ff1851bd83756619655f3af82d6c0a63581389c989b28e20797e24206b6c012
-
SSDEEP
6144:KhEtebnPR8jUdG8lkncrYpm02uvhvrIo1m:Led8YjGcrGiuvVIF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe0d9bf1ac58df04253578d97d9f1841_JaffaCakes118
Files
-
fe0d9bf1ac58df04253578d97d9f1841_JaffaCakes118.exe windows:4 windows x86 arch:x86
43a45b2e85fd26374ca5891d2c385793
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
FindAtomA
GetModuleHandleA
GetLogicalDriveStringsW
GetProcessHeap
GetTimeFormatW
QueryPerformanceFrequency
SetEvent
GetLongPathNameW
GetDateFormatA
EnumDateFormatsA
MulDiv
GetTickCount
GetEnvironmentStringsW
GetVolumeInformationA
IsValidLocale
lstrcpyW
OpenFile
GetShortPathNameA
OpenSemaphoreW
GetNumberFormatW
CopyFileExW
IsBadReadPtr
QueryPerformanceCounter
lstrcat
RemoveDirectoryA
GetShortPathNameW
GetExpandedNameW
GetCurrentDirectoryA
user32
PeekMessageW
SetCursorPos
GetForegroundWindow
AppendMenuW
GetSubMenu
GetMessageA
EnumWindows
RegisterWindowMessageA
GetActiveWindow
GetScrollPos
DestroyCursor
IsChild
RemoveMenu
GetMenuInfo
GetMenuItemInfoA
wvsprintfA
IsMenu
CreatePopupMenu
LoadCursorA
DialogBoxParamA
EndDialog
MonitorFromPoint
CreateDialogIndirectParamA
GetKeyboardType
gdi32
CreateEllipticRgn
SetMetaFileBitsEx
CreatePolyPolygonRgn
CreatePen
CreateFontIndirectExW
CreateDIBSection
CreateFontW
CreateFontIndirectA
CreateFontIndirectW
GetRasterizerCaps
StretchDIBits
GdiGetBatchLimit
CreateScalableFontResourceW
GetMetaFileA
comctl32
ImageList_SetBkColor
ImageList_BeginDrag
comdlg32
FindTextW
opengl32
glRects
glVertex2sv
glColor3s
wglDescribePixelFormat
setupapi
SetupDiGetDeviceInfoListDetailW
pSetupStringTableLookUpStringEx
SetupDiOpenDevRegKey
SetupInstallServicesFromInfSectionExW
SetupGetInfInformationA
wininet
FtpGetFileEx
FindNextUrlCacheEntryA
InternetTimeToSystemTime
SetUrlCacheEntryGroupA
InternetTimeToSystemTimeA
InternetEnumPerSiteCookieDecisionW
InternetAutodialHangup
DeleteUrlCacheEntryW
DeleteUrlCacheEntryA
FreeUrlCacheSpaceW
InternetGetCookieExA
InternetSetPerSiteCookieDecisionW
InternetSetOptionW
FtpRenameFileW
InternetClearAllPerSiteCookieDecisions
inetcomm
MimeOleCreateHashTable
MimeOleGetPropertySchema
HrGetAttachIcon
DllGetClassObject
GetDllMajorVersion
MimeOleGetFileInfo
wsock32
getservbyport
GetTypeByNameW
s_perror
WSAAsyncGetProtoByNumber
WSACancelAsyncRequest
recv
send
ntohl
WSAAsyncSelect
GetAddressByNameW
listen
WSASetBlockingHook
Sections
.qCTQQ Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uGOK Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mvsNWD Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kMTsm Size: 2KB - Virtual size: 475KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.NqvD Size: 3KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.WIF Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.M Size: 16KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WiPC Size: 3KB - Virtual size: 417KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ