Static task
static1
Behavioral task
behavioral1
Sample
3ab8fe8f6a297c6a3f551bc43b87135f_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
3ab8fe8f6a297c6a3f551bc43b87135f_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
3ab8fe8f6a297c6a3f551bc43b87135f_JaffaCakes118
-
Size
875KB
-
MD5
3ab8fe8f6a297c6a3f551bc43b87135f
-
SHA1
fe995245ecebedded0b88f76ae4616e1f16ce38e
-
SHA256
02e716e06241d3b61ba8e69732c68dc453fec06ddfe51015c62f772cf508c047
-
SHA512
4abba78d2c9715709f66e6fd7f05b6d70e3e551bac4a022cf8abe064c4d1fee5a4fe3637225ccfa2d1c04ea4fb567476a525d5957bde774f3226882e0cd1db2f
-
SSDEEP
24576:oVNvaMdFYKFo7sr3EdTegdnDMM/Y2ccAFYk4K:oCMbpwSgdwyAY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ab8fe8f6a297c6a3f551bc43b87135f_JaffaCakes118
Files
-
3ab8fe8f6a297c6a3f551bc43b87135f_JaffaCakes118.exe windows:5 windows x86 arch:x86
d81d5badda59dc3eab80e6bd78038f92
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mpr
WNetGetUniversalNameW
msvcrt
__getmainargs
_XcptFilter
exit
_acmdln
_initterm
__setusermatherr
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_exit
advapi32
RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
psapi
GetProcessImageFileNameW
secur32
FreeContextBuffer
GetUserNameExW
InitializeSecurityContextW
kernel32
LCMapStringW
MultiByteToWideChar
GetCPInfo
GetFullPathNameW
CreateDirectoryW
FindResourceW
GetModuleHandleA
FormatMessageW
FileTimeToSystemTime
GetSystemTimeAsFileTime
CloseHandle
LoadResource
InitializeCriticalSectionAndSpinCount
GetStartupInfoA
LocalFree
TlsAlloc
HeapAlloc
EnterCriticalSection
GetLastError
GetCurrentThreadId
HeapFree
GetProcAddress
HeapDestroy
RtlUnwind
VirtualAlloc
setupapi
CM_Get_Device_IDW
CM_Locate_DevNodeW
SetupDiGetDeviceInstallParamsW
SetupGetLineCountW
SetupGetFieldCount
SetupCloseFileQueue
SetupDiCreateDeviceInfoListExW
SetupDiGetDeviceInfoListDetailW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceInterfaceDetailW
SetupDiBuildDriverInfoList
SetupDiCallClassInstaller
Sections
.text Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4atvg Size: 598KB - Virtual size: 597KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ute20 Size: 203KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ