Static task
static1
Behavioral task
behavioral1
Sample
3b0a8a7366574dab84ca5e495a9dec55_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3b0a8a7366574dab84ca5e495a9dec55_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b0a8a7366574dab84ca5e495a9dec55_JaffaCakes118
-
Size
83KB
-
MD5
3b0a8a7366574dab84ca5e495a9dec55
-
SHA1
770b99c2cf6a584bea994994bf35169b53fb3025
-
SHA256
e9b15649ccc89e1ed951aaace35a82ed727f7d5f33f6e7472bf300f905a99c94
-
SHA512
0372dac5ac8bb6e16c3ce514476fe0d9592e469b72767b7f8334d7da181e6b1a06472c4d6eefd42132977cc29abf151bdff2c4d3da30fadf43af0f03387b3b1a
-
SSDEEP
1536:TfVhE/uEy2LSgSRL8rdHDxaL1cf9TZiNSIhEtMu2JNHYF8CS4l9tI/0quojbIBjV:Tf7pQ/rdHt9TINSIhZlYd3aMq5UB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b0a8a7366574dab84ca5e495a9dec55_JaffaCakes118
Files
-
3b0a8a7366574dab84ca5e495a9dec55_JaffaCakes118.exe windows:4 windows x86 arch:x86
56272eef93c413d1b0cd44dc4c638156
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawIcon
DispatchMessageA
DestroyIcon
CreateMDIWindowA
CreateIconFromResourceEx
CreateDesktopA
CreateCursor
CreateAcceleratorTableA
CopyRect
CharToOemBuffA
CharToOemA
CharLowerA
BeginPaint
ActivateKeyboardLayout
kernel32
EnumResourceNamesA
lstrlenA
lstrcpynA
lstrcmpiA
lstrcatA
TlsGetValue
SleepEx
SetCurrentDirectoryA
MapViewOfFile
LocalAlloc
LeaveCriticalSection
GetStartupInfoA
GetLocalTime
GetCommandLineA
FlushFileBuffers
CompareStringA
EnterCriticalSection
EnumResourceTypesA
ExitProcess
Sections
.text Size: 1024B - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data0 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE