Static task
static1
Behavioral task
behavioral1
Sample
3afd476358cb30f8c37ade29e238f497_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3afd476358cb30f8c37ade29e238f497_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3afd476358cb30f8c37ade29e238f497_JaffaCakes118
-
Size
169KB
-
MD5
3afd476358cb30f8c37ade29e238f497
-
SHA1
ac3a145df9ba9e432e4960772eec0dd96c194a41
-
SHA256
3abafc5184de64027be2ba866bef6d70f413234c6a0462ffc379ba7a398dc677
-
SHA512
761c9e599b11f8427b145b00b754735b3c6fe880afd12b9e9ce05c82591beda64fed3b13cdb1597061e20b0bc3dcac0ec9353fc80c5d11204f663d6ac072f41a
-
SSDEEP
3072:RtW68Ql8tkPTfAiP44NYnewDdw3QbC1+K2hg9Q3Dt0vsxJEXs:Rb8aTRNYneQw3n1+7iQevsz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3afd476358cb30f8c37ade29e238f497_JaffaCakes118
Files
-
3afd476358cb30f8c37ade29e238f497_JaffaCakes118.exe windows:4 windows x86 arch:x86
a0ad922160af7f44bfe354dec02b4003
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalCompact
LoadLibraryExA
DeleteAtom
GetStdHandle
EnterCriticalSection
RaiseException
GlobalFree
GlobalFindAtomA
GetOEMCP
GlobalAddAtomA
GetCommState
GlobalLock
SetCommBreak
lstrcpyn
GetProcessHeap
ExitThread
GetProfileStringA
VirtualAlloc
LocalSize
CloseHandle
LoadResource
user32
GetDC
GetWindow
ShowWindow
GetClassInfoExA
BeginPaint
GetForegroundWindow
AlignRects
CloseWindow
GetActiveWindow
ValidateRect
EndPaint
GetClassNameA
IsIconic
ReleaseDC
GetParent
GetWindowTextLengthA
GetFocus
GetWindowTextA
DrawEdge
wsock32
WSACleanup
WSAStartup
WSASetBlockingHook
WSAGetLastError
WSAAsyncGetServByPort
duser
AutoTrace
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ