Static task
static1
Behavioral task
behavioral1
Sample
fe0e71b9045e3182066193ebcda7ce01_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe0e71b9045e3182066193ebcda7ce01_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe0e71b9045e3182066193ebcda7ce01_JaffaCakes118
-
Size
17KB
-
MD5
fe0e71b9045e3182066193ebcda7ce01
-
SHA1
dabf19f47f2fa3b830462cd2a2eaac670cd4dd16
-
SHA256
637b9c7780f103cda488866ff357bf30232e26940de23948d6749a565e8443ea
-
SHA512
9278d8a3e602acddbb30f384bd0bdca459db0a5d10b7b3efeef3ebcf44b8822f93a8aea0ca1ddbf686e1f095333dd35876f2bc7bae617fc0e7919d9742398bf9
-
SSDEEP
384:2WX6O/MW/uuO2lzd+PqeBE6DrEA5BRhyfrt:p1VQSsYABhcrt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe0e71b9045e3182066193ebcda7ce01_JaffaCakes118
Files
-
fe0e71b9045e3182066193ebcda7ce01_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c16739b35d7ff48119554d8455e3f86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
VirtualProtect
InterlockedExchange
GetStdHandle
FindClose
GetLastError
RemoveDirectoryA
GetSystemDirectoryA
LoadLibraryExA
FindFirstFileExA
ReleaseMutex
GetCommandLineA
GetACP
ResetEvent
EnterCriticalSection
GlobalFree
Sleep
GetLocaleInfoA
RaiseException
SetEvent
HeapCreate
user32
GetWindowTextA
GetFocus
FlashWindowEx
GetParent
SetActiveWindow
FillRect
DrawTextA
ShowWindow
IsIconic
GetClassNameA
ReleaseDC
GetCursorPos
ValidateRgn
GetWindow
BeginPaint
FrameRect
wsprintfA
SetForegroundWindow
EndPaint
winmm
PlaySoundA
auxGetDevCapsA
CloseDriver
OpenDriver
aux32Message
wtsapi32
WTSCloseServer
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ