Static task
static1
Behavioral task
behavioral1
Sample
3644dc6ff1b2ac578ec154b68e751c1b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3644dc6ff1b2ac578ec154b68e751c1b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3644dc6ff1b2ac578ec154b68e751c1b_JaffaCakes118
-
Size
342KB
-
MD5
3644dc6ff1b2ac578ec154b68e751c1b
-
SHA1
945d47e8a591ff160c10acb025016fbb3ab51957
-
SHA256
861712338146da199f9e3c7f7f9e86ac36e06304883e1e0ee5f65c014743c235
-
SHA512
f3660c631aea655d768633f16c7fd1f16c89791195be06d2165ac89f5cf142697003b77a283af742467eb65d434172f57867eb8e01039eb3ac65b403b8796ca9
-
SSDEEP
6144:0GtPLcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/pU7Fc:pFhgh2R8O+yFqpLh+xUy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3644dc6ff1b2ac578ec154b68e751c1b_JaffaCakes118
Files
-
3644dc6ff1b2ac578ec154b68e751c1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
e02c4eefd4d0fca440c8715aac71df51
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateWaitableTimerA
LoadLibraryExA
LocalFree
GlobalLock
GetConsoleCP
IsDebuggerPresent
HeapCreate
FindClose
GetLastError
IsBadReadPtr
FreeEnvironmentStringsA
CloseHandle
GetACP
GlobalUnlock
CreateFileA
lstrlenA
CreateFileMappingA
GetStdHandle
GetModuleHandleA
CreateEventA
user32
RedrawWindow
CheckMenuItem
GetDlgItem
DispatchMessageA
GetSubMenu
GetDlgItemTextA
GetParent
GetMessageA
DialogBoxParamA
SetFocus
ClipCursor
EndDialog
IsMenu
DrawIconEx
apphelp
SdbFindFirstTag
SdbCloseDatabase
ApphelpCheckRunApp
ApphelpCheckIME
ApphelpShowDialog
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ