Static task
static1
Behavioral task
behavioral1
Sample
fef08b39215d57654d98d8639e73065e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fef08b39215d57654d98d8639e73065e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fef08b39215d57654d98d8639e73065e_JaffaCakes118
-
Size
48KB
-
MD5
fef08b39215d57654d98d8639e73065e
-
SHA1
e7266fb95f93b8b29e7c58153cae404531cf999f
-
SHA256
4dbdf0e1eaef6dcc75b00d7b7e5a7e4078fd1cf83a96f7b0698b6807da428e03
-
SHA512
3f48df325329a8acf48810bcba4630e5930024b4b06a44f8479111b52df4bf1c8fbe14f0c5dc812115c05e89bb6523561a14d4a2a2f6243109d895b2b234b1bd
-
SSDEEP
768:1BFBLITpomPmqwsnV3Pl+qaCkW5P+tpwR:1KTpbtwsV31aCktS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fef08b39215d57654d98d8639e73065e_JaffaCakes118
Files
-
fef08b39215d57654d98d8639e73065e_JaffaCakes118.exe windows:4 windows x86 arch:x86
8678b65d5e019b5f43a9f285d8d69d38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
GetProcAddress
GetModuleHandleA
HeapAlloc
GetLastError
lstrcatA
ExitProcess
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcpyA
GetEnvironmentVariableA
LoadLibraryA
lstrlenA
GetLocalTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetTickCount
GetTempPathA
Process32Next
SizeofResource
LockResource
LoadResource
FindResourceA
Sleep
GetWindowsDirectoryA
DeleteFileA
CloseHandle
CreateThread
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
RtlUnwind
HeapReAlloc
MoveFileA
GetStartupInfoA
GetCommandLineA
GetVersion
VirtualFree
VirtualAlloc
GetModuleFileNameA
GetVersionExA
HeapDestroy
HeapCreate
WriteFile
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ