Static task
static1
Behavioral task
behavioral1
Sample
3cc6a8503eb1482420f55c18670bd5cf_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3cc6a8503eb1482420f55c18670bd5cf_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
3cc6a8503eb1482420f55c18670bd5cf_JaffaCakes118
-
Size
2.1MB
-
MD5
3cc6a8503eb1482420f55c18670bd5cf
-
SHA1
06203013b2ce295143c2eb6ed7f198bed6416188
-
SHA256
05b2f3d9f1f538306f883ae4e763e2a0c12a210997c353c39121cd559c639ccb
-
SHA512
dec65b0d7342709c4076c4250c5b9b4d2859fc6d8cbbb7bd61974c97d6467ff849e61a93597279599cab8f1a0469cbfbfb052f17cffe8ec11463386d610527ba
-
SSDEEP
24576:gbOjX9jKyR+7BDWBTrY6gj+vsN1KbPbszzCVsoW73cjCvqNkZLvjCFfTtKuoM68L:gbwKd7B6lSgsN1KDUfB3SfajCFYbAR1x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cc6a8503eb1482420f55c18670bd5cf_JaffaCakes118
Files
-
3cc6a8503eb1482420f55c18670bd5cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
3aacc1a610ab18d5fc893d604b31b60b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExA
CryptAcquireContextA
InitializeAcl
IsValidSid
RegCloseKey
RegCreateKeyExA
OpenSCManagerW
RegOpenKeyExW
OpenThreadToken
msvcrt
_except_handler3
_onexit
__dllonexit
__set_app_type
_controlfp
_acmdln
_XcptFilter
rewind
strncmp
_amsg_exit
_initterm
strstr
malloc
wcscpy
exit
_adjust_fdiv
ferror
__setusermatherr
_getcwd
_exit
__p__commode
_vsnprintf
fclose
realloc
__getmainargs
isdigit
__p__fmode
__p___initenv
fputs
kernel32
GetCurrentProcessId
GetTickCount
Sleep
GetProcAddress
GetCurrentThreadId
GetLastError
SetUnhandledExceptionFilter
VirtualFree
GetCurrentProcess
LoadLibraryA
VirtualAlloc
GetStartupInfoA
UnhandledExceptionFilter
GetModuleHandleA
FreeLibrary
ole32
OleInitialize
CoTaskMemFree
HWND_UserMarshal
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoGetClassObject
CLSIDFromString
shlwapi
PathMatchSpecW
PathIsUNCW
PathFindExtensionW
PathFileExistsW
PathFindFileNameW
PathStripToRootW
PathCompactPathW
gdi32
SetBkColor
GetClipRgn
ModifyWorldTransform
GetObjectType
GetObjectW
DeleteObject
OffsetRgn
SetViewportOrgEx
CreateBrushIndirect
GetTextExtentPoint32W
GetDeviceCaps
GetTextFaceA
SetTextColor
CreateDCW
GetDIBits
DeleteDC
SelectObject
GetStockObject
CreateFontIndirectW
TextOutW
GetTextExtentPointA
SetBrushOrgEx
GdiFlush
GetTextMetricsW
CreateBitmap
user32
GetDC
MoveWindow
GetSysColor
EnableWindow
DestroyMenu
LoadStringW
SetForegroundWindow
GetDlgItem
SendMessageW
ReleaseDC
SetWindowPos
TranslateMessage
MessageBoxW
GetWindow
SetWindowTextW
IsWindow
IsWindowEnabled
EndDialog
SetFocus
KillTimer
MessageBoxA
DestroyWindow
GetParent
GetClientRect
CreatePopupMenu
ShowWindow
PostQuitMessage
GetWindowRect
SetCursor
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ