Static task
static1
Behavioral task
behavioral1
Sample
3bb2fcb58bb3c59fac8c77d122f616ce_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
3bb2fcb58bb3c59fac8c77d122f616ce_JaffaCakes118
-
Size
6.2MB
-
MD5
3bb2fcb58bb3c59fac8c77d122f616ce
-
SHA1
2c81cf97f8d14e49e57d71c1c1712fc98ce0b1f6
-
SHA256
722cca9ee5f4b41fc88cf37102116322f715c81701d904e139b983b4f4c6a0c5
-
SHA512
12b232a5085b9fe3a44edb2419dca495bed21b71c5cfd55e3af36b8177084532a2a9f5803ea529163b01c9dbb5a56f1e2989005dd146df2b4d5f5ff8b70b4a30
-
SSDEEP
196608:33zNDcVF0w3xs30D2zb+a9EUpq+LLpeJXKFOJ:zu0Ws30yl5LQJXwOJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bb2fcb58bb3c59fac8c77d122f616ce_JaffaCakes118
Files
-
3bb2fcb58bb3c59fac8c77d122f616ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
e25879e674a2868ae691bc6756d0f8f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetStockObject
SetTextColor
SetBkMode
user32
GetDlgItem
GetDlgItemTextA
GetForegroundWindow
MessageBoxA
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
GetDlgCtrlID
FindWindowA
ShowWindow
EndDialog
DialogBoxParamA
wsprintfA
kernel32
CreateFileMappingA
MapViewOfFile
GetCommandLineA
lstrlenA
lstrcpyA
lstrcatA
WritePrivateProfileStringA
Sleep
SetFileTime
SetFileAttributesA
SetEndOfFile
CloseHandle
lstrcmpiA
ReadFile
SetFilePointer
CreateFileA
WriteFile
CopyFileA
CreateThread
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetExitCodeProcess
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileStringA
GetProcessHeap
GetSystemTime
GetUserDefaultLangID
GetWindowsDirectoryA
LocalAlloc
LocalFree
MultiByteToWideChar
RtlZeroMemory
UnmapViewOfFile
shell32
ShellExecuteExA
SHChangeNotify
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA
ole32
CoUninitialize
CoTaskMemFree
CoInitialize
CoCreateInstance
CoGetMalloc
comctl32
InitCommonControls
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CarData Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ