Static task
static1
Behavioral task
behavioral1
Sample
3551be1a7cfe1da72a3f14e03d0a70dd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3551be1a7cfe1da72a3f14e03d0a70dd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3551be1a7cfe1da72a3f14e03d0a70dd_JaffaCakes118
-
Size
172KB
-
MD5
3551be1a7cfe1da72a3f14e03d0a70dd
-
SHA1
fbd44941385b9cf8f4ef84431a21ce82e09b5178
-
SHA256
3fe9520edbf7085622c166980c7872aea6e5f3bd7bedeb61ca93666a6209d0dd
-
SHA512
4fa22b769ecf9cd18b5680afa50bb408cad48c32000bcc7fd6c9429e445e75459f257d26306fe1d7b2eb4290f3acb546202d4dccd0d47d9b6ca5388173421ae6
-
SSDEEP
3072:hKoaEx2TX56mCaDiLp2PBgjCvsioCsEpTABYLx2TbvD5iVB:Se2TX5R7OuvroTEpUBYLsTbAVB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3551be1a7cfe1da72a3f14e03d0a70dd_JaffaCakes118
Files
-
3551be1a7cfe1da72a3f14e03d0a70dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
9f599b3d93a21a2cc81da0b191109470
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdiplus
GdipGetImageWidth
GdipDisposeImage
ole32
CoGetMalloc
CoUninitialize
StringFromGUID2
CoTaskMemAlloc
CoInitialize
CoTaskMemFree
kernel32
GetCalendarInfoW
GetCurrentProcess
lstrlenW
GetLastError
GetProcessId
VirtualQuery
GetProcAddress
OutputDebugStringW
SetLastError
MultiByteToWideChar
GetCurrentThreadId
LocalFree
LocalAlloc
SetEnvironmentVariableW
lstrcmpiW
OutputDebugStringA
EnumResourceNamesA
ExitProcess
CreateDirectoryW
GetModuleFileNameW
InitializeCriticalSection
GetCurrentDirectoryW
VirtualProtect
GetFileAttributesW
DuplicateHandle
GetFileInformationByHandle
SearchPathW
GetModuleHandleA
GetModuleHandleW
WideCharToMultiByte
FreeLibrary
InterlockedExchange
Sleep
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ