Static task
static1
Behavioral task
behavioral1
Sample
3b056f728968ed4614073e2e060e5ea4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b056f728968ed4614073e2e060e5ea4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b056f728968ed4614073e2e060e5ea4_JaffaCakes118
-
Size
182KB
-
MD5
3b056f728968ed4614073e2e060e5ea4
-
SHA1
05ffe44469993fa5e16bee563617240573b391ce
-
SHA256
9e6a7a648cd73085465598b3003caa5b7d05abb202529699e3b23e27c9022cd8
-
SHA512
5caa8cef82f252f8ec2380c56674ade1473f78247d1d1d52cf2ced3d00087beefafffe4d5a14c4c63e9fc49a02cf4e4cfe7dd2638b8548494fab230208deea79
-
SSDEEP
3072:SuDdD0erls644OGgKApsC3PjaOhnvKIlhEoEtGfaIU8CD+469RsoFSo5+PErzD:bDdD8/4OfbaOhCIlhdRU8s+46fSswO/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b056f728968ed4614073e2e060e5ea4_JaffaCakes118
Files
-
3b056f728968ed4614073e2e060e5ea4_JaffaCakes118.exe windows:4 windows x86 arch:x86
198a3c3919a191872e63d7d04518e046
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
shlwapi
PathAddBackslashA
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
WideCharToMultiByte
IsDebuggerPresent
GetAtomNameW
lstrlenA
GetCurrentThreadId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
MultiByteToWideChar
InterlockedCompareExchange
GetLocaleInfoW
EnumResourceNamesA
SetUnhandledExceptionFilter
Sleep
GetEnvironmentVariableW
RaiseException
TzSpecificLocalTimeToSystemTime
LocalAlloc
GetModuleHandleW
lstrlenW
GetACP
QueryPerformanceCounter
GetStartupInfoW
CreateProcessW
GetTickCount
GetCurrentProcessId
InterlockedExchange
GetThreadLocale
winmm
mciSendCommandA
sndPlaySoundA
advapi32
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ