Static task
static1
Behavioral task
behavioral1
Sample
fff78f91d2d3e27c8f3cc9610f01e8db_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fff78f91d2d3e27c8f3cc9610f01e8db_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fff78f91d2d3e27c8f3cc9610f01e8db_JaffaCakes118
-
Size
21KB
-
MD5
fff78f91d2d3e27c8f3cc9610f01e8db
-
SHA1
5a6f9133749d71eaa130548449b1559b988067bc
-
SHA256
a3b10ac63cc20c552679e447635b33892477ebb8493b38b2b969a9b1d3e82604
-
SHA512
615050910087c6cb49ce02fb5ff3dd824f9ad06ccbb5d63802fcd5722ba0223f6118ddc34667c4258f9f13001d7a18427d1ad812c003834b4e139b65256dc3a9
-
SSDEEP
384:ByyyyyyyyyyyyyyyyHtf5NJI5vfCKrQyl93TLcN5OkHK4MuoXy0nfM/lUXiP5h2z:ByyyyyyyyyyyyyyyyHtf5NC5vfzEaHYE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fff78f91d2d3e27c8f3cc9610f01e8db_JaffaCakes118
Files
-
fff78f91d2d3e27c8f3cc9610f01e8db_JaffaCakes118.exe windows:44356 windows x86 arch:x86
f8812565c82f2f16a32b0f70e5a180b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
VirtualAlloc
HeapReAlloc
SetFilePointer
SetLastError
GetProcessHeap
FreeLibrary
VirtualAlloc
VirtualAlloc
GetCurrentProcess
GetStartupInfoA
MultiByteToWideChar
GetCommandLineA
EnterCriticalSection
VirtualAlloc
HeapReAlloc
FreeLibrary
lstrcpyW
GetACP
CloseHandle
GetModuleHandleW
Sleep
LocalFree
GetSystemTimeAsFileTime
FreeLibrary
WaitForSingleObject
GetTickCount
TerminateProcess
GetCurrentProcess
lstrlenW
UnhandledExceptionFilter
lstrlenW
GetCurrentProcess
user32
GetSysColor
SystemParametersInfoW
GetDesktopWindow
LoadIconW
GetDC
CharNextW
GetSystemMetrics
GetDlgItemTextW
FillRect
GetDC
TranslateMessage
ReleaseCapture
GetSysColor
SetRect
PostMessageW
UpdateWindow
MessageBoxW
DestroyWindow
SetForegroundWindow
GetSystemMetrics
EndDialog
CopyRect
wsprintfW
GetWindowLongW
DispatchMessageA
MoveWindow
GetMessageW
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ