Static task
static1
Behavioral task
behavioral1
Sample
0335955f3572ba8f4bd1c961dce2ffb6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0335955f3572ba8f4bd1c961dce2ffb6_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0335955f3572ba8f4bd1c961dce2ffb6_JaffaCakes118
-
Size
134KB
-
MD5
0335955f3572ba8f4bd1c961dce2ffb6
-
SHA1
61ed7fd8492768fab9815fe0e4893e06eb90db97
-
SHA256
ccce584b61ce8dc44c265f13ba947a9944e98e329f6c1d76a1c426a8eab231c2
-
SHA512
0a5fc0e281e5927565e6f4905f264328a6a617ab9e2f9abf1deb150e9b3be5d9f3473d1d7a6cb1859affe9f7cc709bf6f9962917ad50bc7d729e910ddc30de5e
-
SSDEEP
3072:G4w9Wm05DSF6KMXoEt1OM34fturn1TFQVu:G44WZ5DSYcMXnpWVu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0335955f3572ba8f4bd1c961dce2ffb6_JaffaCakes118
Files
-
0335955f3572ba8f4bd1c961dce2ffb6_JaffaCakes118.exe windows:4 windows x86 arch:x86
03a058f062df9e3818a71a7bd15d067c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
GetDriveTypeA
GetLogicalDriveStringsA
FindClose
FindNextFileA
FindFirstFileA
CopyFileA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetLastError
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
CreateFileA
SetStdHandle
RtlUnwind
GetEnvironmentStringsW
CloseHandle
ResumeThread
SuspendThread
TerminateThread
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
SetEndOfFile
CreateThread
FreeEnvironmentStringsA
GetModuleFileNameA
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
FlushFileBuffers
WriteFile
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
ReadFile
UnhandledExceptionFilter
GetStringTypeW
user32
IsDlgButtonChecked
EndDialog
CheckRadioButton
SetDlgItemTextA
DialogBoxParamA
SendMessageA
CheckDlgButton
GetDlgItem
EnableWindow
GetDlgItemTextA
MessageBoxA
comdlg32
GetOpenFileNameA
advapi32
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
comctl32
ord17
shlwapi
PathSetDlgItemPathA
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE