Static task
static1
Behavioral task
behavioral1
Sample
3a3b74ce657efed4a29b035df3dad34a_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3a3b74ce657efed4a29b035df3dad34a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
3a3b74ce657efed4a29b035df3dad34a_JaffaCakes118
-
Size
303KB
-
MD5
3a3b74ce657efed4a29b035df3dad34a
-
SHA1
a6aab4d7e5bd712c579129d02bb2a2a660602814
-
SHA256
344fa72057e3b8bb4130b008a493fcc2c8777d241c6a9de22ec8e7438f2e7aa2
-
SHA512
82d8d14799642f8b89f413c8122ce751ef42661906619659d80c714a71878a7e6ff0803cf0a37946204e59ebd411ab1443be33a7da345bd204c2cac64c8c56f9
-
SSDEEP
6144:5s4vpfge2xMkMR1SbG5mHEWJtvIuvZmYdOsUIe+TAvY8:ikpb2xRwIbG4RIuxmYdlP0vH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a3b74ce657efed4a29b035df3dad34a_JaffaCakes118
Files
-
3a3b74ce657efed4a29b035df3dad34a_JaffaCakes118.exe windows:4 windows x86 arch:x86
85f2858b29cf50689b6146dbb4591c95
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsBadWritePtr
CreateMutexW
GetExitCodeProcess
GetModuleHandleA
SetFileTime
SetFileTime
CreatePipe
GetLastError
FormatMessageW
lstrcatA
InitializeCriticalSection
GetFileSize
lstrcpyA
LoadLibraryA
SetFileTime
FindResourceW
GetStartupInfoW
LeaveCriticalSection
ReadFile
HeapCreate
CloseHandle
msi
MsiAdvertiseProductW
MsiConfigureFeatureA
MsiCollectUserInfoA
MsiDatabaseCommit
user32
GetWindowLongW
PostMessageW
GetWindowRect
PeekMessageW
IsDialogMessageA
MessageBoxA
IsWindow
DispatchMessageA
GetWindowTextA
IsZoomed
SetFocus
LoadCursorW
wsprintfW
clbcatq
SetSetupSave
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rich Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 129B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE