Static task
static1
Behavioral task
behavioral1
Sample
3857d5c8a58febd5662c773454fd58ef_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3857d5c8a58febd5662c773454fd58ef_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3857d5c8a58febd5662c773454fd58ef_JaffaCakes118
-
Size
14KB
-
MD5
3857d5c8a58febd5662c773454fd58ef
-
SHA1
178a3ea5c224465fd8de350fbb22c1a163430d4a
-
SHA256
c56b92191f96b2dd98e4d750b3dfa20ecb7612fe6b413c43a4b29ca7ee18820d
-
SHA512
f3024204b3ceecd5be33f2d3f0ad8f809fb5cfde61e49dc8701dba971e5c8d89236495e4c27c3bebdb14c60d99769866b296769bb1b8dcdb8617dc9fbc7ab4c8
-
SSDEEP
192:TPE5XgDA1yRGvWngLgDP1oynFojiyaoKCpVgmiuaOS4lXrqa:+XjybngsL1EjiUPPouad4lXrq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3857d5c8a58febd5662c773454fd58ef_JaffaCakes118
Files
-
3857d5c8a58febd5662c773454fd58ef_JaffaCakes118.exe windows:4 windows x86 arch:x86
45a33d76517d165f67ff91468bc13521
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
CopyFileA
GetProcAddress
LoadLibraryA
Sleep
DeleteFileA
WaitForSingleObject
TerminateProcess
OpenProcess
GetCommandLineA
CreateThread
GetModuleFileNameA
WinExec
GetSystemDirectoryA
LockResource
LoadResource
SizeofResource
FindResourceA
GetStartupInfoA
GetModuleHandleA
GetCurrentProcess
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
GetWindowsDirectoryA
user32
FindWindowExA
FindWindowA
SendMessageA
advapi32
LookupPrivilegeValueA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
AdjustTokenPrivileges
winmm
mixerSetControlDetails
mixerGetLineControlsA
mixerGetLineInfoA
mixerOpen
msvcrt
_exit
_controlfp
_except_handler3
__set_app_type
strlen
sprintf
strncpy
sscanf
strchr
strrchr
memset
fclose
fwrite
fopen
_stricmp
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ