Static task
static1
Behavioral task
behavioral1
Sample
feebd9d3949429ba97281998e65bfb4c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
feebd9d3949429ba97281998e65bfb4c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
feebd9d3949429ba97281998e65bfb4c_JaffaCakes118
-
Size
138KB
-
MD5
feebd9d3949429ba97281998e65bfb4c
-
SHA1
0f0aaff2a58f08d6813baad95341075a93a9cc5e
-
SHA256
ea456a47ea98417392165d55b20814422a30f3848df35a0155213f15516fb63e
-
SHA512
71b15a88d042242c93244de18e33c30abe8ec3e967220f0d99a6d93b137b03f31023070bb4a2896dd5f7339f59b8a2e5287f39de025c884aa5715c5e5475f0fa
-
SSDEEP
3072:hIH5sua45rcTWDCUfrxlcoseENjry4+JXUv4Jj7r:Vua5TWGUzxTEdr1+JXUQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feebd9d3949429ba97281998e65bfb4c_JaffaCakes118
Files
-
feebd9d3949429ba97281998e65bfb4c_JaffaCakes118.exe windows:25558 windows x86 arch:x86
ae5fbe79b83fae0fd40a83b805fcdc07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetACP
GetModuleHandleW
GetACP
LoadLibraryA
LocalFree
VirtualFree
GetCurrentThreadId
VirtualFree
VirtualAlloc
VirtualFree
FormatMessageW
QueryPerformanceCounter
lstrlenW
GetModuleHandleA
FormatMessageW
gdi32
GetDeviceCaps
TextOutW
MoveToEx
DeleteDC
TextOutW
GetObjectW
PatBlt
GetStockObject
SelectObject
GetDeviceCaps
shell32
SHGetMalloc
Shell_NotifyIconW
SHGetFolderPathW
DragAcceptFiles
ExtractIconExW
user32
GetDC
UpdateLayeredWindow
DestroyWindow
LoadStringW
SendMessageW
ShowWindow
SetTimer
SetTimer
advapi32
FreeSid
RegCreateKeyExA
GetLengthSid
RegOpenKeyW
RegDeleteKeyW
FreeSid
OpenThreadToken
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ