Static task
static1
Behavioral task
behavioral1
Sample
fe7ca67db454821beafa075c66172f81_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe7ca67db454821beafa075c66172f81_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe7ca67db454821beafa075c66172f81_JaffaCakes118
-
Size
99KB
-
MD5
fe7ca67db454821beafa075c66172f81
-
SHA1
94a6cc7a37cae935703cfeb78cd0f379dae69d8d
-
SHA256
9fad7f9723f8ccdd776aa0ebee0482e346389c6ca05aeb863339ca693b572268
-
SHA512
5c6dbf480253d8a5fd032987b53504a257f0b116d83feaeecf252cd5d2f7b4c7a3ed35e993029321d9fc3d3d921c0ee38ff12f003ebf7618a6a1cb68721ea7d0
-
SSDEEP
768:cWhHNU8K6Ki536/dYkIuoZ0THeksrdRGCgL6kUt7jiEQFZ:ZK81KTdbw0TWrdRbMUvU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe7ca67db454821beafa075c66172f81_JaffaCakes118
Files
-
fe7ca67db454821beafa075c66172f81_JaffaCakes118.exe windows:1 windows x86 arch:x86
335d3a51f4f7a24bdc88e5c12ddced56
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
lstrcpyW
TerminateProcess
GetCommandLineW
Sleep
LoadLibraryW
HeapFree
InterlockedIncrement
InitializeCriticalSection
SetUnhandledExceptionFilter
SetFilePointer
LocalAlloc
SetFilePointer
LeaveCriticalSection
GetProcAddress
GetProcessHeap
GetModuleHandleW
DeleteCriticalSection
GetVersionExA
FormatMessageW
GetLastError
WriteFile
GetModuleHandleA
SetUnhandledExceptionFilter
CreateThread
Sections
.jhdy Size: 87KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sqoc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hbbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vnyu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bpbn Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fevq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tqmj Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dpnx Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qtqm Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE