lhxXfY9mIrDZ
Static task
static1
Behavioral task
behavioral1
Sample
3c0ad5c6d1092d23de3b95c4a1ca3b8d_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
3c0ad5c6d1092d23de3b95c4a1ca3b8d_JaffaCakes118
-
Size
152KB
-
MD5
3c0ad5c6d1092d23de3b95c4a1ca3b8d
-
SHA1
d6d530a4162ca3fd3ad6d6270bd68e6d696a9515
-
SHA256
40b0086b9ce4a58db51f1dd3e8a7fd4f78e3766f2c5b7f3e1d4208a6bfaaf0e5
-
SHA512
4fe4cdc14e517bfbe556b286a81ca11cd47c3d2bc007b1d8ae932b379589dca42bce64c413b9af0649b824d44c270f5fc0318feca62f8027782ab491fb7bb0f5
-
SSDEEP
3072:/t0kQHEE+CXFaWokclgQ0S7kNNcaxVTOVi6WXJs+u:wENVWxBS7qcaxKizG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c0ad5c6d1092d23de3b95c4a1ca3b8d_JaffaCakes118
Files
-
3c0ad5c6d1092d23de3b95c4a1ca3b8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
63d9a32ebdd5daf5801711100aa2574b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
FreeLibrary
CompareStringW
CompareStringA
ReadFile
SetEndOfFile
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedExchange
GetOEMCP
GetACP
CreateFileA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
VirtualQuery
GetSystemInfo
GlobalAlloc
GetCPInfo
GetLocaleInfoA
SetFilePointer
IsBadCodePtr
SetUnhandledExceptionFilter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
CloseHandle
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetTimeZoneInformation
WideCharToMultiByte
HeapSize
GlobalLock
GlobalUnlock
GetCurrentProcess
GetExitCodeProcess
ExitProcess
OutputDebugStringA
GetLastError
GetComputerNameA
lstrcpyA
lstrcatA
IsBadReadPtr
VirtualAlloc
LoadLibraryA
VirtualProtect
GetProcAddress
TerminateProcess
IsBadWritePtr
HeapReAlloc
VirtualFree
HeapCreate
HeapDestroy
RaiseException
SetEnvironmentVariableA
GetVersionExA
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapFree
GetSystemTimeAsFileTime
RtlUnwind
HeapAlloc
user32
ReleaseDC
ShowWindow
wsprintfA
MessageBoxA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
DeleteMenu
GetSystemMenu
GetClientRect
GetWindowRect
SystemParametersInfoA
SetWindowPos
AdjustWindowRectEx
ValidateRect
GetMenu
PostQuitMessage
PeekMessageA
SendMessageA
GetMessageA
TranslateMessage
DispatchMessageA
WaitMessage
DefWindowProcA
UnregisterClassA
DestroyWindow
LoadCursorA
RegisterClassExA
SetRect
AdjustWindowRect
CreateWindowExA
GetDC
UpdateWindow
SetFocus
GetWindowLongA
SetWindowLongA
winmm
timeGetTime
d3d8
Direct3DCreate8
wsock32
bind
WSAStartup
send
recv
connect
closesocket
htons
getservbyname
socket
WSACleanup
gethostbyname
Exports
Exports
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ