Static task
static1
Behavioral task
behavioral1
Sample
fbdd103ae86d23f7e3f4d993d4a570cc_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
fbdd103ae86d23f7e3f4d993d4a570cc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
fbdd103ae86d23f7e3f4d993d4a570cc_JaffaCakes118
-
Size
168KB
-
MD5
fbdd103ae86d23f7e3f4d993d4a570cc
-
SHA1
f8f7231787d46581876460247f6a17fd7c54062b
-
SHA256
dd41d88fbde6ca80a88dd8d25ad258d962e239d585772fec6d1f4988349e1aa3
-
SHA512
cf96502eb2ebdfe72f7fd27a29b349e78a1d80e120a4d336dc95d5d9d711a8405dbbbb0d6ab73a753ff20d516a460b13470a58f50aeb9a06d1e797f604f2ed2b
-
SSDEEP
3072:Y95qQ/o5bLwW38yiOMqVba3ocoz0y3u9oOq1Pvf1ubAgPnv7oFIpHf7n:Y95qQgbd8EMqg3EzFu9E1Pvf1yPnjbNb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbdd103ae86d23f7e3f4d993d4a570cc_JaffaCakes118
Files
-
fbdd103ae86d23f7e3f4d993d4a570cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
b7bda6f2230845b837343c29b8fe140b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateDirectoryW
ExitProcess
GlobalUnlock
WaitForSingleObject
GlobalLock
GetVersionExW
GetTempPathW
lstrlenW
SetErrorMode
lstrcmpW
WideCharToMultiByte
WriteConsoleInputVDMA
GetTempFileNameW
GetModuleHandleW
Sleep
OpenProcess
ExpandEnvironmentStringsW
GetModuleFileNameW
FreeLibrary
GetModuleHandleA
SearchPathW
GetVersion
GlobalFree
CopyFileW
ReadFile
GetProcessHandleCount
GetProcAddress
LoadLibraryExW
lstrcpynW
WriteFile
SetFilePointer
lstrcpyW
GetExitCodeProcess
SetCurrentDirectoryW
CreateThread
GetCommandLineW
GetFileAttributesW
EnumResourceNamesA
CreateFileW
RemoveDirectoryW
MultiByteToWideChar
FindClose
LoadLibraryW
GetPrivateProfileStringW
LoadLibraryA
lstrcmpiA
lstrcmpiW
GetDiskFreeSpaceW
GetWindowsDirectoryW
DeleteFileW
WritePrivateProfileStringW
GetLastError
CreateProcessW
GetSystemDirectoryW
CloseHandle
FreeEnvironmentStringsW
lstrcatW
MoveFileW
GlobalAlloc
lstrcpyA
CompareFileTime
lstrcpynA
SetFileAttributesW
GetFullPathNameW
lstrlenA
MulDiv
GetFileSize
FindNextFileW
GetCurrentProcess
FindFirstFileW
GetShortPathNameW
GetTickCount
SetFileTime
advapi32
RegCreateKeyExW
RegCloseKey
RegEnumValueW
RegDeleteKeyW
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyW
user32
LoadCursorW
CharUpperW
OpenClipboard
IsWindowEnabled
CreateDialogParamW
DefWindowProcW
LoadImageW
IsWindowVisible
SetClipboardData
GetDlgItemTextW
CreateWindowExW
GetWindowModuleFileNameW
SetWindowPos
CharNextA
GetMessagePos
GetClassInfoW
TrackPopupMenu
LoadBitmapW
SendMessageTimeoutW
SetWindowTextW
CloseClipboard
GetSystemMenu
ShowWindow
GetClientRect
SetDlgItemTextW
EnableMenuItem
DrawTextW
GetSystemMetrics
GetDlgItem
RegisterClassW
SetWindowLongW
SetCursor
AppendMenuW
FillRect
EmptyClipboard
SendMessageW
wsprintfA
SetClassLongW
FindWindowExW
GetWindowRect
CharPrevW
EndDialog
ExitWindowsEx
MessageBoxIndirectW
GetDC
DestroyWindow
EnableWindow
CallWindowProcW
SetTimer
CreatePopupMenu
EndPaint
BeginPaint
GetSysColor
DialogBoxParamW
InvalidateRect
PeekMessageW
IsWindow
DispatchMessageW
CharNextW
SystemParametersInfoW
wsprintfW
PostQuitMessage
CheckDlgButton
SetForegroundWindow
ScreenToClient
comctl32
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
oleacc
LresultFromObject
CreateStdAccessibleObject
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHBrowseForFolderW
ole32
OleInitialize
OleUninitialize
CoCreateInstance
CoTaskMemFree
gdi32
DeleteObject
CreateBrushIndirect
SetTextColor
CreateFontIndirectW
GetDeviceCaps
SetBkMode
SelectObject
SetBkColor
Sections
.text Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ