Static task
static1
Behavioral task
behavioral1
Sample
338934e3ec863b58ee2d103c73058ba4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
338934e3ec863b58ee2d103c73058ba4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
338934e3ec863b58ee2d103c73058ba4_JaffaCakes118
-
Size
140KB
-
MD5
338934e3ec863b58ee2d103c73058ba4
-
SHA1
c6dea6c54537cd9c0c51201ca26b4332b41c54bd
-
SHA256
98d5441ea19c95995612be0fc1fb85644fc358bc0125f26460e49eb238e2c60f
-
SHA512
574044be5b2e301516602c42dbb43d76278f73338f8cee6b01dc8cad9172b961e460f1e3f6f86fdcc9c6992303644c0461b867fea7067f525c4ae505fc48d72e
-
SSDEEP
3072:YbMes5IgWG1Vsuejar2yozYbbCC15/6ifaCvDV+2LvLhQ1LzKjqG79EPNfy1:qMes5hx+dyozYbbCC15/6ifaCvx+2LGn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 338934e3ec863b58ee2d103c73058ba4_JaffaCakes118
Files
-
338934e3ec863b58ee2d103c73058ba4_JaffaCakes118.exe windows:4 windows x86 arch:x86
25755d02e08299c7ce683e341049ea38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetLastError
GetModuleHandleA
GetStartupInfoA
GetVersionExW
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
msvcrt
_write
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_iob
_isctype
_onexit
_pctype
_setmode
abort
atexit
atof
atoi
fclose
fopen
fprintf
fputc
fread
free
fseek
ftell
fwrite
getenv
localeconv
localtime
malloc
memchr
memcpy
memmove
memset
mktime
signal
sprintf
sscanf
strchr
strcmp
strlen
strncmp
time
tolower
vfprintf
wcslen
user32
DialogBoxParamW
EndDialog
GetDlgItemTextA
IsDlgButtonChecked
Sections
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 18KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE