Static task
static1
Behavioral task
behavioral1
Sample
3335d39e1c335baff80826b94bfef201_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3335d39e1c335baff80826b94bfef201_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3335d39e1c335baff80826b94bfef201_JaffaCakes118
-
Size
27KB
-
MD5
3335d39e1c335baff80826b94bfef201
-
SHA1
72bba90aa3b8751679a7c7dca8245ef8c58cdf49
-
SHA256
587aac5f3b9e60b8d4222a1088b5bbf0e98dfc22cfe19f0a9a3509ff807833a8
-
SHA512
2bedc025c6541b1dd838f600766a7a1af521527ec06bc93f58854e222c53d7cfae140c67cd74734c380b3b0b0cfbfdff8ef784a8965f732f672e005c97dfcb16
-
SSDEEP
384:DEQQXfEqLmuXOzcIv/V5CjF9Njb1B4b5r0pX2X4rfCbdXTHJGHhyQQId1/VXfYck:D7qLmvcIvt5CjFn1OlPXTHJYdQId1h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3335d39e1c335baff80826b94bfef201_JaffaCakes118
Files
-
3335d39e1c335baff80826b94bfef201_JaffaCakes118.exe windows:52038 windows x86 arch:x86
b491c86961636a5200ff509f061af246
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetACP
GetStartupInfoA
HeapDestroy
VirtualAlloc
WideCharToMultiByte
InterlockedDecrement
LocalAlloc
HeapFree
CreateThread
ExitProcess
CreateFileW
GetStartupInfoA
InitializeCriticalSection
GetCurrentProcessId
CloseHandle
GetACP
GetProcessHeap
InitializeCriticalSection
lstrcpyW
EnterCriticalSection
GetCurrentProcessId
GetCommandLineA
SetFilePointer
HeapReAlloc
MultiByteToWideChar
EnterCriticalSection
WideCharToMultiByte
VirtualFree
GetModuleHandleA
LoadLibraryA
ExitProcess
VirtualAlloc
LeaveCriticalSection
user32
GetWindowRect
DispatchMessageA
CreateDialogParamW
DestroyWindow
CreateWindowExW
IsWindowVisible
BeginPaint
InvalidateRect
SetRect
IsIconic
GetSystemMetrics
DispatchMessageA
SetWindowTextW
OffsetRect
ShowWindow
DestroyWindow
GetSubMenu
GetDlgCtrlID
DispatchMessageW
DialogBoxParamW
wsprintfA
IsDialogMessageW
CallWindowProcW
DispatchMessageW
InvalidateRect
GetMenu
ScreenToClient
IsDialogMessageW
ShowWindow
PostQuitMessage
IsDlgButtonChecked
SetTimer
SendMessageA
DefWindowProcW
SystemParametersInfoW
wsprintfW
TranslateMessage
ShowWindow
GetDlgCtrlID
GetKeyState
IsDlgButtonChecked
GetKeyState
PostMessageW
LoadStringA
WinHelpW
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ