Static task
static1
Behavioral task
behavioral1
Sample
3ad54dd88c4a55d140131eaff8777238_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ad54dd88c4a55d140131eaff8777238_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ad54dd88c4a55d140131eaff8777238_JaffaCakes118
-
Size
148KB
-
MD5
3ad54dd88c4a55d140131eaff8777238
-
SHA1
1b158b1c5e7cda4d8cd029b2eb6b7bd82668ac9c
-
SHA256
a230e1080286aefa52f7be750a6080e3b9471a6c0203a8be3c4ce9f866e2c4f5
-
SHA512
9fe0dcdff3eaebaf77e32742eb92a6b38e473f92340e1be801aad9f9345fd381e47428b0c2b50985ef4ebb63eda76664eb38d6293b11270ba195c982b82380d6
-
SSDEEP
3072:RxP/XQ8a5xCrB3+7nNxzJOxAy7H0Wq0sNYFfPw:RxP/XQkrADf0Ay7FqBEw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ad54dd88c4a55d140131eaff8777238_JaffaCakes118
Files
-
3ad54dd88c4a55d140131eaff8777238_JaffaCakes118.exe windows:5 windows x86 arch:x86
391609c197292cc8cbc3b02513c5158e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrCatW
StrCpyW
StrRStrIW
StrStrIW
kernel32
CloseHandle
WriteFile
CreateFileW
WideCharToMultiByte
CreateThread
GetCommandLineW
GetModuleHandleW
GetProcAddress
LoadLibraryW
TerminateThread
GetExitCodeThread
GetTickCount
GetEnvironmentVariableW
FindClose
DeleteFileW
ReadFile
VirtualAlloc
GetFileSize
FindNextFileW
GetLastError
FindFirstFileW
ExpandEnvironmentStringsW
FreeLibrary
LoadLibraryExW
GetPrivateProfileStringW
MultiByteToWideChar
GetVersion
Process32NextW
OpenProcess
Process32FirstW
CopyFileW
SetSystemTime
GetSystemTime
GetProcessHeap
HeapAlloc
HeapFree
LoadLibraryA
HeapReAlloc
VirtualFree
GetModuleFileNameA
GetStdHandle
InitializeCriticalSectionAndSpinCount
lstrlenW
CreateProcessW
WaitForSingleObject
Sleep
CreateToolhelp32Snapshot
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsSetValue
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
ExitProcess
GetLocaleInfoA
user32
GetAsyncKeyState
CallNextHookEx
GetDlgItemInt
GetWindowLongW
SetWindowLongW
SetWindowPos
SetLayeredWindowAttributes
DefWindowProcW
EndPaint
GetSystemMetrics
CreateWindowExW
ShowWindow
UpdateWindow
SetForegroundWindow
SetWindowsHookExW
DialogBoxParamW
EndDialog
MessageBoxW
BeginPaint
GetDC
ReleaseDC
RegisterClassExW
gdi32
TextOutW
CreateDIBitmap
CreateDIBSection
CreateFontA
CreateCompatibleDC
SelectObject
BitBlt
SetBkMode
SetTextColor
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ