Static task
static1
Behavioral task
behavioral1
Sample
fe30ebd55918cbaa7a82bfddbd91d981_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe30ebd55918cbaa7a82bfddbd91d981_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe30ebd55918cbaa7a82bfddbd91d981_JaffaCakes118
-
Size
24KB
-
MD5
fe30ebd55918cbaa7a82bfddbd91d981
-
SHA1
239e895ff68802451dd83e9da0d4e250a2843c53
-
SHA256
4607d169962881b78d3c197e61d58ba836bb8fc13927aa347fb4b0115e43797d
-
SHA512
a9ab28978fd1fba87573e91ebee8ebed531b732b06e844da4c62e26ced767841107b19d8dce1edbf84e7df593a0258eb9bc7599b3840d9a134d986e336045b4c
-
SSDEEP
192:tW0t8gREa0um236wmaNYtqy0S9PkQk4NJqz4nmr:8sRV1mKAMYky0wkQk4vIq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe30ebd55918cbaa7a82bfddbd91d981_JaffaCakes118
Files
-
fe30ebd55918cbaa7a82bfddbd91d981_JaffaCakes118.exe windows:4 windows x86 arch:x86
a20e68fb49a8cf042f236d9a3a383bdc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameA
GetConsoleCP
GetThreadPriority
TlsFree
GetThreadLocale
GetModuleHandleA
ReleaseMutex
GetLargestConsoleWindowSize
IsDBCSLeadByte
CompareStringA
CreateMutexA
GetThreadTimes
VirtualAlloc
GetOEMCP
GetUserDefaultLangID
CancelWaitableTimer
SetEvent
TlsGetValue
GetExitCodeThread
AddAtomA
CreatePipe
user32
ValidateRect
RegisterClassA
GetSystemMetrics
IsWindowVisible
ShowWindow
InvalidateRect
GetForegroundWindow
CloseWindow
GetFocus
IsIconic
GetWindow
ReleaseDC
GetClassNameA
GetWindowTextLengthA
GetWindowTextA
GetClassInfoExA
GetActiveWindow
ReleaseDC
GetDC
msutb
DllCanUnloadNow
ClosePopupTipbar
GetLibTls
GetPopupTipbar
DllGetClassObject
shimeng
SE_DynamicShim
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 522B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ