Static task
static1
Behavioral task
behavioral1
Sample
fcac88d3037efdf3de6412299db28c48_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
fcac88d3037efdf3de6412299db28c48_JaffaCakes118
-
Size
432KB
-
MD5
fcac88d3037efdf3de6412299db28c48
-
SHA1
a3fa8cb5fb9de81c8b7c9fbf160302aba29b3df3
-
SHA256
ef6f2f04bdd49960286554be86f917bef52d1113240c17eec04415e4ce994004
-
SHA512
9ff68941d8862df0b51f781b7e0bd4164b0d80932b711f239eb68a3fcc0b78fb4d361bd381f80ab18f9f5a520e557e0ddd8daf30a692219fc92e32ea51feae2f
-
SSDEEP
6144:JHpHhokx/zpZWYNXwjmsr+TwYBB2XpmdAQePrfi+oquERpaE6TSt/RRIKF7/va6b:JH3vts68YBsX3f5uEvaLTSt5RI+/vaAL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcac88d3037efdf3de6412299db28c48_JaffaCakes118
Files
-
fcac88d3037efdf3de6412299db28c48_JaffaCakes118.exe windows:4 windows x86 arch:x86
1f5287e828fde9c945b15910b4502967
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CloseHandle
LoadLibraryA
CreateFileA
GetCurrentProcess
ExitProcess
user32
CharLowerBuffA
SetWindowLongA
CreateWindowExA
CloseWindow
wsprintfA
advapi32
RegDeleteValueA
RegEnumValueA
RegDeleteKeyA
RegCloseKey
RegSetValueA
RegEnumKeyA
RegCreateKeyA
RegQueryValueA
RegOpenKeyA
Sections
.text Size: 412KB - Virtual size: 412KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ