Static task
static1
Behavioral task
behavioral1
Sample
3049e1eae4b2475d29f0f40861fa6ac3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3049e1eae4b2475d29f0f40861fa6ac3_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3049e1eae4b2475d29f0f40861fa6ac3_JaffaCakes118
-
Size
40KB
-
MD5
3049e1eae4b2475d29f0f40861fa6ac3
-
SHA1
2c4cff272ca294e916e763b80370db7e71442b92
-
SHA256
5db1589c2067b2383ec2b5adae12c628f4b1d57e1201c86ad86e4f7803805375
-
SHA512
fe2cd0787cafef9b899a0300d5ef59f4c6695c64321a5645561dc8671ed351d9ca99f676b43eb604414bc3165374f147629f1005f4fdbbd4b710bb97caec8f29
-
SSDEEP
768:rZFWTNIZmgA2nxOHKWKpTNLJ9Ty55VPJ70eOo7FO:rC5IZmgA2+FKpTpXYjJ7yo70
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3049e1eae4b2475d29f0f40861fa6ac3_JaffaCakes118
Files
-
3049e1eae4b2475d29f0f40861fa6ac3_JaffaCakes118.exe windows:4 windows x86 arch:x86
d1662ea9b0ff6c0bf460ba4819414396
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
SetFileAttributesA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
lstrlenA
VerLanguageNameA
MultiByteToWideChar
SetLastError
SetEndOfFile
LoadLibraryA
GetProcAddress
CreateFileA
SetFilePointer
SetCurrentDirectoryA
HeapReAlloc
VirtualAlloc
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
WriteFile
GetShortPathNameA
GetSystemDirectoryA
GetTempPathA
CreateDirectoryA
GetVersion
SetStdHandle
DeleteCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
ResumeThread
CreateThread
TlsSetValue
ExitThread
CloseHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetCPInfo
GetACP
GetOEMCP
HeapFree
GetCurrentThreadId
TlsAlloc
TlsGetValue
HeapAlloc
UnhandledExceptionFilter
RtlUnwind
FlushFileBuffers
ReadFile
user32
wsprintfA
DialogBoxParamA
MessageBoxA
EndDialog
SetWindowTextA
GetDlgItem
EnableWindow
PostMessageA
ShowWindow
shell32
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
wininet
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
ole32
CoInitialize
CoCreateInstance
comctl32
ord17
advapi32
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ