Static task
static1
Behavioral task
behavioral1
Sample
3835ae414ab9d1383d5559264922a824_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3835ae414ab9d1383d5559264922a824_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3835ae414ab9d1383d5559264922a824_JaffaCakes118
-
Size
328KB
-
MD5
3835ae414ab9d1383d5559264922a824
-
SHA1
384c0139660a2a75b5a3bbe6e12b608c89433d10
-
SHA256
1d1a7aae4c9f727a545f28eaf49b373dd0300b40c28cf4a6a6e1b07e7ce2eb1b
-
SHA512
38b184f4355dd0b2f1bd81a44b9f2ad33302b07e4cb2e010ed5bb042c8d6b23f937f050a0c93f85f24fba9ef7dde4646e2dee3f222343a746104ffc74f850ee6
-
SSDEEP
6144:kcCrv+RSsmeBLnRPjvRu7qTnMCUu4g+HGfTxn7bs:jCrG4s7nRbRu7eMCUI++Txs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3835ae414ab9d1383d5559264922a824_JaffaCakes118
Files
-
3835ae414ab9d1383d5559264922a824_JaffaCakes118.exe windows:4 windows x86 arch:x86
a3060ce8a79312c9dda0b6aef3132ce0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_SetBkColor
ImageList_Merge
ImageList_EndDrag
GetEffectiveClientRect
DrawStatusText
ImageList_GetBkColor
CreatePropertySheetPage
_TrackMouseEvent
CreateStatusWindowA
DrawInsert
CreateStatusWindowW
ImageList_GetDragImage
ImageList_Create
CreateToolbarEx
kernel32
VirtualQuery
CommConfigDialogW
TerminateProcess
GetCurrencyFormatW
GlobalGetAtomNameW
GetStdHandle
EnterCriticalSection
GetEnvironmentStringsW
GetVersion
VirtualFree
LeaveCriticalSection
GetCurrentThread
GetLastError
GetSystemTimeAsFileTime
GetTimeFormatW
ExitProcess
OpenProcess
FlushInstructionCache
GetCurrentProcessId
GetLocalTime
GetFileType
UnhandledExceptionFilter
GetStartupInfoW
SetLastError
FreeEnvironmentStringsA
TlsAlloc
FindNextFileW
VirtualAlloc
ReadFile
lstrcpy
InterlockedExchange
GetModuleHandleA
WriteConsoleOutputCharacterA
GetTimeZoneInformation
OpenMutexA
LoadLibraryA
GetSystemTime
ReadConsoleInputW
SetFilePointer
HeapAlloc
GetModuleFileNameW
GlobalLock
GetCPInfo
GetStringTypeA
TlsSetValue
CompareStringW
HeapCreate
GetCurrentThreadId
ReadFileEx
GetLocaleInfoW
LCMapStringA
TlsFree
GetProcAddress
WideCharToMultiByte
RtlUnwind
WriteFile
CompareStringA
GetTimeFormatA
FindNextChangeNotification
CreateMutexA
MultiByteToWideChar
InterlockedDecrement
GetEnvironmentStrings
IsBadWritePtr
GetModuleFileNameA
InitializeCriticalSection
GetCommandLineA
SetEnvironmentVariableA
SetStdHandle
QueryPerformanceCounter
CloseHandle
GetTickCount
GetExitCodeThread
SetHandleCount
TlsGetValue
HeapReAlloc
ExitThread
HeapFree
FreeEnvironmentStringsW
GetCurrentProcess
GetStringTypeW
GetStartupInfoA
HeapDestroy
GetCommandLineW
GetThreadContext
FlushFileBuffers
AddAtomW
InterlockedIncrement
LCMapStringW
DeleteCriticalSection
advapi32
CryptVerifySignatureW
CreateServiceW
CryptGetHashParam
RegDeleteKeyW
RegSaveKeyW
RegSetValueExA
LookupAccountSidA
RegQueryValueW
StartServiceA
LookupAccountNameW
RegRestoreKeyA
RegDeleteKeyA
RegLoadKeyA
RegEnumKeyExA
user32
NotifyWinEvent
FlashWindow
MapWindowPoints
LoadAcceleratorsW
CascadeWindows
GetWindowInfo
IsCharUpperW
SetDebugErrorLevel
RegisterClassA
DlgDirSelectExA
RegisterClassExA
GetMessagePos
TranslateMDISysAccel
GetWindowTextW
SetMessageExtraInfo
EndTask
ReleaseDC
GetActiveWindow
IsMenu
Sections
.text Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ