Static task
static1
Behavioral task
behavioral1
Sample
3fc3a33162880703e46a0abbb9468a93_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3fc3a33162880703e46a0abbb9468a93_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
3fc3a33162880703e46a0abbb9468a93_JaffaCakes118
-
Size
202KB
-
MD5
3fc3a33162880703e46a0abbb9468a93
-
SHA1
c4ff868c4a9f8154247e663ca0b4411272107a3b
-
SHA256
ac35e6dd6a4cd4d3c65f55e3d3044b150049a8b164ab608d4883f8c7cc3610a7
-
SHA512
3e042fc29bfcc5dfd6affa5d7622d5190aa4b4d655d8856083505b900a8d41e2013d0fd9c56f0bdd6d4c3a40076dd70c610bfebb6e045b95ea576b925786a01c
-
SSDEEP
3072:gj7c1k1NGwbAXogCDnflraLERhdZ06gXHdhSSOkw5gBh:4i0AXog+lTlZOXL5O+z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fc3a33162880703e46a0abbb9468a93_JaffaCakes118
Files
-
3fc3a33162880703e46a0abbb9468a93_JaffaCakes118.exe windows:5 windows x86 arch:x86
50f66b2fcbaa6ef1fc51ce3152c87a58
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
MoveFileExW
GetSystemDefaultLCID
GetModuleHandleW
GetPrivateProfileStringW
LoadLibraryW
WriteConsoleOutputA
GetStringTypeExW
GetModuleFileNameW
lstrlenW
GetProcAddress
LocalAlloc
GlobalMemoryStatusEx
HeapLock
FindNextFileW
WriteConsoleOutputAttribute
OpenFileMappingA
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
HeapFree
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
CloseHandle
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
msimg32
AlphaBlend
Sections
.text Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ