Static task
static1
Behavioral task
behavioral1
Sample
3289811335d2040fe4d05362e44436de_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3289811335d2040fe4d05362e44436de_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3289811335d2040fe4d05362e44436de_JaffaCakes118
-
Size
160KB
-
MD5
3289811335d2040fe4d05362e44436de
-
SHA1
61458521725c6ca47efeef2465d11e80f67f253e
-
SHA256
c3cd2453a81de6e4515a169e233a474b188c1be41b4bdffddb15557f99ddef22
-
SHA512
055ee09796a6e1770f2196af82768cf460e55f1b19025f253ceacd44bad3babc265cc22e32a9e26749ef74ffe91e0b036c27295031a0b32ce60c4fa5504e41c6
-
SSDEEP
3072:UEWltRJkea+LYNqSOSKSACX5UAlsYlCnMOhyNIjyzt:UEgRTa4mpACJUAlj0nMOINIOR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3289811335d2040fe4d05362e44436de_JaffaCakes118
Files
-
3289811335d2040fe4d05362e44436de_JaffaCakes118.exe windows:4 windows x86 arch:x86
2130572a20db2823fd6c66c4b9be3c0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
GetLocalTime
LoadLibraryExA
GetProfileStringA
LoadResource
GetOEMCP
RaiseException
GlobalLock
ExitThread
GlobalFindAtomA
lstrcpyn
GlobalAddAtomA
LocalSize
SetConsolePalette
GetStdHandle
SetCommBreak
CloseHandle
VirtualAlloc
DeleteAtom
GlobalFree
GetProcessHeap
user32
CloseWindow
GetWindowTextA
ReleaseDC
GetFocus
ValidateRect
GetClassInfoExA
AlignRects
GetActiveWindow
IsIconic
GetWindow
GetClassNameA
GetParent
GetDC
DrawEdge
EndPaint
ShowWindow
GetWindowTextLengthA
GetForegroundWindow
BeginPaint
wsock32
WSAAsyncGetServByPort
WSASetBlockingHook
WSAGetLastError
WSACleanup
WSAStartup
linkinfo
CreateLinkInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ