Static task
static1
Behavioral task
behavioral1
Sample
f3ff9eb389ef49488fa5a2976d42f19e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3ff9eb389ef49488fa5a2976d42f19e_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3ff9eb389ef49488fa5a2976d42f19e_JaffaCakes118
-
Size
169KB
-
MD5
f3ff9eb389ef49488fa5a2976d42f19e
-
SHA1
90b895abb2c1a1d6b007669360aca28f5806065f
-
SHA256
11f3bd088f33892e7e02ea0836cf0889f4516cf8cbbdb5691b28bdcd3433ee41
-
SHA512
786f340658e8ad3573a52d922f97141a816b0c066330e3586acecdf9ec3ecd332ba9d79b21fbcc75ea4e2fc84cf9460a2a54037d1e8ea3a0d07c03f9994ce9e7
-
SSDEEP
3072:Kh/+32SyQprsDUpyv5iiVE9+Ga5oEYt9iGIlXDGe8URUC+HfF0Mmt1R7:8/7XQtsn5xG9+8jiGWXDG5p9/Ftmt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3ff9eb389ef49488fa5a2976d42f19e_JaffaCakes118
Files
-
f3ff9eb389ef49488fa5a2976d42f19e_JaffaCakes118.exe windows:4 windows x86 arch:x86
4873145ef508f2ef9e72fe03c6509e10
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
WritePrivateProfileStringA
GetPrivateProfileStringA
SystemTimeToFileTime
FileTimeToSystemTime
GetProcAddress
LoadLibraryA
GetCommandLineA
GetModuleFileNameA
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
GetPrivateProfileIntA
ExitProcess
GetLastError
GetLocaleInfoW
CloseHandle
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
VirtualAlloc
InterlockedDecrement
SetFilePointer
InterlockedIncrement
HeapFree
GetStringTypeW
HeapAlloc
WriteFile
GetModuleHandleA
GetStartupInfoA
GetVersion
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
RtlUnwind
GetStringTypeA
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
user32
DispatchMessageA
TranslateMessage
SetTimer
KillTimer
PostQuitMessage
DrawTextA
BeginPaint
GetClientRect
InvalidateRect
EndPaint
DefWindowProcA
FindWindowA
wsprintfA
RegisterWindowMessageA
LoadCursorA
PostMessageA
SetForegroundWindow
CreateWindowExA
RegisterClassExA
GetSystemMetrics
GetMessageA
ShowWindow
UpdateWindow
gdi32
GetStockObject
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 27KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE