Static task
static1
Behavioral task
behavioral1
Sample
35ac3e30a8a7f6cc8889c37270b55ae6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
35ac3e30a8a7f6cc8889c37270b55ae6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35ac3e30a8a7f6cc8889c37270b55ae6_JaffaCakes118
-
Size
150KB
-
MD5
35ac3e30a8a7f6cc8889c37270b55ae6
-
SHA1
3af791935668e9919ba1bb69893fcec8089cc535
-
SHA256
e1a63f5dbe48faf015130a1d140dac0d95dfd8be625de3b680809a409a8edb0c
-
SHA512
6327c41791173a7aa4f7bd7d847fa72be48342892b7a423c5898e0b0c79e510bff6b97d80d0029b7b3f68571895eb23f34fadf480dbb352df9d8dcdba2d45120
-
SSDEEP
3072:d2PYAHTHNLe93B+WVD/6Q2VFyVLMyyjystjUXtbxr:j0tLSx6r6LMFysta
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35ac3e30a8a7f6cc8889c37270b55ae6_JaffaCakes118
Files
-
35ac3e30a8a7f6cc8889c37270b55ae6_JaffaCakes118.exe windows:4 windows x86 arch:x86
c020276f370637b044cb16598c094a03
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
EscapeCommFunction
IsDBCSLeadByteEx
OpenJobObjectW
GetFullPathNameA
GetConsoleCP
GetNumberFormatW
GetCPInfoExW
GetLastError
PrepareTape
ReleaseMutex
EnumResourceTypesA
GlobalUnlock
ReadDirectoryChangesW
FatalAppExitW
GetStdHandle
MoveFileWithProgressA
VirtualProtect
GlobalAddAtomW
GetComputerNameExA
MoveFileExA
SetFileApisToANSI
FindNextVolumeW
GetCommState
user32
SetCursor
IsCharAlphaA
CreateIconIndirect
LoadStringA
IsDialogMessage
RegisterClassW
GetWindowLongA
OpenWindowStationA
IsCharUpperA
DrawAnimatedRects
OpenDesktopW
GetMenuItemRect
IsCharAlphaNumericW
BroadcastSystemMessageW
GetLastInputInfo
DlgDirListComboBoxW
gdi32
GetTextExtentPointI
EngReleaseSemaphore
GdiFullscreenControl
SetViewportOrgEx
GdiAddFontResourceW
CreateFontIndirectW
SetGraphicsMode
AddFontMemResourceEx
GdiGetCodePage
EngWideCharToMultiByte
EngEraseSurface
GetHFONT
RemoveFontResourceTracking
GetMapMode
GdiEntry9
GdiQueryFonts
DeviceCapabilitiesExA
GetLayout
GdiSetPixelFormat
GdiComment
comdlg32
PageSetupDlgW
GetFileTitleA
PrintDlgW
dwOKSubclass
ChooseColorW
GetOpenFileNameA
ReplaceTextW
WantArrows
LoadAlterBitmap
ChooseFontW
FindTextA
PrintDlgExA
GetSaveFileNameA
Sections
.text Size: 4KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE