Static task
static1
Behavioral task
behavioral1
Sample
3baa3ae5df4b614427d61d991b842703_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3baa3ae5df4b614427d61d991b842703_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
3baa3ae5df4b614427d61d991b842703_JaffaCakes118
-
Size
833KB
-
MD5
3baa3ae5df4b614427d61d991b842703
-
SHA1
cca86391336b48cd87cb416ae1568acb1e31fc1f
-
SHA256
80bbe9f13a0a61269fcfe7389cb5d2c621403057f8df3559bea6f363b624e3bb
-
SHA512
759523e17acc8585386bd149c1adfda60a3ff916e9e52178937a67c90d709501bdd6afbb0d67847eb9cd38270b6db13dd834f5716fb3d793dba97bb62a1209be
-
SSDEEP
6144:+cpRR/AuPYdO45UMD+GSepUm2ptAlgYiFvWZf63OmpOtkCT5H7IhOcb0j9/tvL8:+cpRR/AT5bv1P4Yty3OmpMnV7I4cb0H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3baa3ae5df4b614427d61d991b842703_JaffaCakes118
Files
-
3baa3ae5df4b614427d61d991b842703_JaffaCakes118.exe windows:5 windows x86 arch:x86
05bfbfb54a94720e3262937ee0b30339
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAllocEx
CreateDirectoryW
DeleteCriticalSection
GetCurrentDirectoryW
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDriveTypeW
GetFullPathNameW
GetSystemTimeAsFileTime
GetModuleHandleW
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
lstrlenA
GetFileAttributesW
GetCommandLineA
CreateFileA
Sleep
CreateFileW
GetVolumePathNameW
user32
LoadCursorA
LoadIconW
MessageBoxW
wsprintfW
gdi32
DeleteColorSpace
CloseEnhMetaFile
advapi32
RegOpenKeyA
RegQueryValueExA
shell32
CommandLineToArgvW
winmm
timeGetTime
msvcrt
_XcptFilter
__getmainargs
__initenv
__setusermatherr
_adjust_fdiv
_c_exit
_cexit
_except_handler3
_exit
_get_osfhandle
_initterm
_iob
_putws
_wcsicmp
_wcsnicmp
exit
fgetws
free
malloc
printf
swprintf
towupper
wcscat
wcschr
wcscmp
wcscpy
wcslen
Sections
.text Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 708KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ