Static task
static1
Behavioral task
behavioral1
Sample
3adb5023b7433034c2a8d726027e3d9e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3adb5023b7433034c2a8d726027e3d9e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3adb5023b7433034c2a8d726027e3d9e_JaffaCakes118
-
Size
263KB
-
MD5
3adb5023b7433034c2a8d726027e3d9e
-
SHA1
d8ba9d0b149ce6d1023ce1a1d0135dd4257d77b6
-
SHA256
7fb57a00231696e5b87fdd78fcca9d3c237fefbe05d8c88921e0d155c1e19fc1
-
SHA512
592abbdfbcd5f9cea62c10cc4066a32ba8939963bec07069ad49df2127357f5328ebd0568ed3cb824514e40d88f8aebb0d3453c9a91ea6aef3461c9c2bf21ab0
-
SSDEEP
6144:0b0Yd00j/+/rr9jc9+81/lIHHyNKmgb9nKGblD0TbaHBei:80KhzunSk81dySkzb9HCT+HB/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3adb5023b7433034c2a8d726027e3d9e_JaffaCakes118
Files
-
3adb5023b7433034c2a8d726027e3d9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
201124be1a47bbc914cf3c82c58445be
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
WaitForSingleObject
CreateSemaphoreW
EnumDateFormatsExW
ReleaseSemaphore
GetCommandLineW
GetProcAddress
LoadLibraryW
FreeLibrary
DeleteFileW
LocalAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
GetModuleHandleW
GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualProtect
GetCurrentThreadId
FoldStringW
GetLocaleInfoW
Sleep
oleaut32
SafeArrayDestroyDescriptor
SafeArrayCreateEx
SafeArraySetIID
SafeArrayGetRecordInfo
SafeArraySetIID
SetErrorInfo
SysAllocString
SysAllocStringLen
msvfw32
ICInfo
Sections
.text Size: 168KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 310B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ