Static task
static1
Behavioral task
behavioral1
Sample
36a699b3a932fe836675693d48a7c29e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36a699b3a932fe836675693d48a7c29e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36a699b3a932fe836675693d48a7c29e_JaffaCakes118
-
Size
313KB
-
MD5
36a699b3a932fe836675693d48a7c29e
-
SHA1
534bd4797d8dc66074279f1674a5c5fc188d8c41
-
SHA256
6e128cd978f071a8c049f52136b604360a6763c9c76ebaef994359a2d53474b1
-
SHA512
ea70da506e3835178aa626dcebcec32acc63578a0e96e70b87a6ab235c811200e43a15c182221412547e9e4191d9be3057928a010f0db91f33012b89b38a5f71
-
SSDEEP
6144:OfX5K14o/r+O7+1RKXrHJk5UXkalaqq8+8gXmgGVyuD1G0IUJmqHafm:OfJK/S/2XrHJmR8NgGouRNBsqHem
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36a699b3a932fe836675693d48a7c29e_JaffaCakes118
Files
-
36a699b3a932fe836675693d48a7c29e_JaffaCakes118.exe windows:4 windows x86 arch:x86
e8056288bd12d56cc1478e571ff81ad9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLangID
GlobalCompact
EnterCriticalSection
GlobalLock
ExitProcess
GetProfileStringA
GlobalFree
CreateHardLinkA
GetProcessHeap
GetModuleHandleA
GetStdHandle
GetCommState
GetOEMCP
CloseHandle
FormatMessageA
ClearCommBreak
GetTapeStatus
ReadProcessMemory
VirtualAlloc
FindAtomA
GlobalFlags
user32
GetClassNameA
GetClassInfoExA
EndPaint
GetFocus
ValidateRect
IsIconic
BeginPaint
GetWindow
GetForegroundWindow
ShowWindow
DrawEdge
GetDC
RegisterClassA
GetActiveWindow
CloseWindow
GetWindowTextA
GetParent
GetWindowTextLengthA
ReleaseDC
wsock32
WSAIsBlocking
WSAAsyncSelect
WSAGetLastError
WSACleanup
WSAStartup
dot3api
Dot3SetProfile
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ