Static task
static1
Behavioral task
behavioral1
Sample
3075d5603182f99c672234ba4210de0f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3075d5603182f99c672234ba4210de0f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3075d5603182f99c672234ba4210de0f_JaffaCakes118
-
Size
177KB
-
MD5
3075d5603182f99c672234ba4210de0f
-
SHA1
d143d4266ea19a298d56412c0149e778f5ef8d05
-
SHA256
47d47e3af8195778d57a03f48ca805931532669d17de0defc85e1c749ba65a04
-
SHA512
be56ae967d8e44baa4205f356739bcdbcd2082524a93447500c86ba9471db04e002c82bcbb1565f2ce1ca79de329a6ef84c14189126c05b8b1212d130cc3d48a
-
SSDEEP
3072:rW1EbY5ubxEe+aOevFo1/j/Tf2BwNmXYouiCwT2afUH1aE7PwgSAjIRBlFuI22L/:RYgFEBaJdolTQOmEiCUM9TSAjafj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3075d5603182f99c672234ba4210de0f_JaffaCakes118
Files
-
3075d5603182f99c672234ba4210de0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
5f56aa5230473e3db31b427a8ffb56ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
FlashWindow
RealGetWindowClassA
DestroyWindow
SetCapture
InvalidateRgn
EnableWindow
ValidateRgn
ValidateRect
UpdateWindow
GetCapture
ReleaseCapture
IsWindowEnabled
IsWindow
ExcludeUpdateRgn
GetUpdateRgn
kernel32
CompareStringA
GetShortPathNameW
GetStringTypeW
FindFirstFileW
ConvertFiberToThread
LCMapStringW
SetCurrentDirectoryW
SetThreadIdealProcessor
GetCurrentProcess
IsBadReadPtr
GetSystemDirectoryW
SetEnvironmentVariableW
FileTimeToSystemTime
EnumResourceNamesW
LocalFileTimeToFileTime
LocalAlloc
FindNextFileW
FindResourceW
GetOEMCP
FileTimeToLocalFileTime
RegisterWaitForSingleObject
FindClose
SystemTimeToFileTime
LocalFree
GetLocalTime
FreeLibrary
LoadResource
SetErrorMode
SearchPathW
Sections
.text Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 1024B - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ