Static task
static1
Behavioral task
behavioral1
Sample
fe616b711a477aa4a822daa50dfe2684_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fe616b711a477aa4a822daa50dfe2684_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe616b711a477aa4a822daa50dfe2684_JaffaCakes118
-
Size
435KB
-
MD5
fe616b711a477aa4a822daa50dfe2684
-
SHA1
2df94844d5bed29b0da525b69ee7dd06040d69ce
-
SHA256
08e9041af1607845ee578ac7e2b82237f1f416ac1a7956354caacf6a11c08064
-
SHA512
e83a642f8d700db71c1e0a2667656428faccfef681d3debbb0a4dc813ef7c22e3bfab4465b7e7a12f17009017db143c1741c69e4ddc8a97d97d666498a7f3712
-
SSDEEP
12288:xKYlhMUls4vq3Wvf64ubknpD1a7sUvGd41SfzyhC6OvK:xJKQqEqkndClGROh/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe616b711a477aa4a822daa50dfe2684_JaffaCakes118
Files
-
fe616b711a477aa4a822daa50dfe2684_JaffaCakes118.exe windows:4 windows x86 arch:x86
168dbe60f12ac49a9abfc52f5661b1c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetACP
TlsFree
EnumSystemLocalesA
RtlUnwind
InitializeCriticalSection
EnterCriticalSection
GetCurrentProcess
GetUserDefaultLCID
VirtualAlloc
UnhandledExceptionFilter
SetLastError
HeapReAlloc
GetStringTypeA
GetSystemDirectoryW
GetStdHandle
GetEnvironmentStrings
TlsSetValue
GetModuleFileNameA
GetFileType
HeapSize
ExitProcess
GetLocaleInfoW
HeapDestroy
IsValidLocale
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
GetVersionExA
GetDateFormatA
LeaveCriticalSection
QueryPerformanceCounter
SetConsoleTextAttribute
WriteFile
CompareStringA
WideCharToMultiByte
GetCurrentThreadId
GetCurrentThread
HeapAlloc
GetSystemInfo
HeapFree
GetProcessShutdownParameters
VirtualFree
GetCurrentProcessId
DeleteCriticalSection
IsBadWritePtr
HeapCreate
GetPrivateProfileSectionA
LCMapStringW
GetCommandLineA
GetOEMCP
IsValidCodePage
GetEnvironmentStringsW
SetHandleCount
TlsGetValue
GetTimeFormatA
FreeEnvironmentStringsA
GetModuleHandleA
GetThreadPriorityBoost
GetLocaleInfoA
CompareStringW
MapViewOfFile
VirtualProtect
GetAtomNameW
WritePrivateProfileStructW
GetCPInfo
LCMapStringA
GetProcAddress
GetStartupInfoA
GetStringTypeW
FreeEnvironmentStringsW
TlsAlloc
InterlockedExchange
MultiByteToWideChar
TerminateProcess
GetTimeZoneInformation
VirtualQuery
SetEnvironmentVariableA
user32
GetUpdateRect
SendInput
DefWindowProcA
CascadeWindows
DdeCreateStringHandleA
TileWindows
CharLowerW
PeekMessageW
FindWindowExA
DdeUnaccessData
DlgDirListComboBoxA
IsCharLowerA
DdeGetLastError
EnumDesktopWindows
DrawAnimatedRects
MsgWaitForMultipleObjects
SetCaretBlinkTime
DdeAbandonTransaction
SetDoubleClickTime
GetMenuItemInfoA
DrawFocusRect
DrawFrame
SetMenuDefaultItem
wininet
InternetGetCookieW
InternetReadFileExW
InternetQueryOptionW
DeleteUrlCacheEntryA
InternetCombineUrlA
FindFirstUrlCacheGroup
FtpSetCurrentDirectoryA
InternetFortezzaCommand
SetUrlCacheEntryGroupW
SetUrlCacheEntryInfoA
UnlockUrlCacheEntryFile
Sections
.text Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 273KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ