Static task
static1
Behavioral task
behavioral1
Sample
fee1a0a5bde634afeb9e1d6a37c57c2f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fee1a0a5bde634afeb9e1d6a37c57c2f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fee1a0a5bde634afeb9e1d6a37c57c2f_JaffaCakes118
-
Size
116KB
-
MD5
fee1a0a5bde634afeb9e1d6a37c57c2f
-
SHA1
6c5c556f50c577076bbab39fbd6d67ea7a3a2af6
-
SHA256
690fec7da17cbd325057b83e12de5b8db223a06745e94e8108ee2a4f5460cd8a
-
SHA512
e9bce1c5511d9a278733bfd952e69218bbc6b2279dacc0b181a44c393f1c42fe5952991b9757e3106d760a7ba12e6352ca1351cdd4d5f936846b8d6345f80afc
-
SSDEEP
1536:6st8FCKAMAGk4PsInM5ebQI/RAR/3PdE66KEijBxrjkEKDS+NwZ7DzdNudCSwug:6st8UkDFtnMIP/qZcKzBeEplD3ul9g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fee1a0a5bde634afeb9e1d6a37c57c2f_JaffaCakes118
Files
-
fee1a0a5bde634afeb9e1d6a37c57c2f_JaffaCakes118.exe windows:1 windows x86 arch:x86
2fcd3b19e34e6cee9504abbedc18948d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
MulDiv
GetModuleHandleA
lstrlenA
GetEnvironmentStrings
ResumeThread
QueryPerformanceCounter
Module32Next
GetFileType
lstrcpyA
GetDateFormatA
CompareStringA
CreateToolhelp32Snapshot
SetPriorityClass
HeapCreate
DeleteCriticalSection
GetCurrentDirectoryA
ExitProcess
GetACP
GetProcAddress
SetEnvironmentVariableA
GetCurrentThreadId
TlsSetValue
IsValidCodePage
GetCurrentThread
VirtualFree
msvcrt
_strdup
exit
_mbcjistojms
_getw
_wcsnset
atan
wcsstr
_initterm
_exit
_vscprintf
__p__commode
_unlock
_setmaxstdio
_fstati64
isupper
_putenv
_chkesp
sprintf
_XcptFilter
_wutime
setvbuf
_except_handler3
__p__fmode
_wspawnvp
_sys_nerr
isgraph
_adjust_fdiv
__setusermatherr
_getmaxstdio
_heapadd
rewind
ungetwc
iswlower
_acmdln
__set_app_type
__getmainargs
floor
putc
memcpy
_spawnvpe
_spawnvp
_controlfp
_mktime64
gdi32
MoveToEx
CreateRectRgn
GetBkMode
GetDeviceCaps
CreateDIBSection
CreatePen
SaveDC
Rectangle
LineTo
DeleteObject
Polyline
SetTextAlign
GetTextExtentPoint32A
BitBlt
ExtTextOutA
SelectClipRgn
GetBkColor
CreateSolidBrush
user32
DeleteMenu
GetMessageA
DefMDIChildProcA
RemoveMenu
GetClassLongA
DialogBoxIndirectParamA
FindWindowExA
MapWindowPoints
IsDlgButtonChecked
UnionRect
SetDlgItemTextA
GetDlgCtrlID
SetWindowPlacement
DefDlgProcA
MoveWindow
TrackPopupMenuEx
DestroyIcon
EmptyClipboard
InsertMenuA
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ