Static task
static1
Behavioral task
behavioral1
Sample
3a223698f544461acf960dafcae5d2a1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a223698f544461acf960dafcae5d2a1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a223698f544461acf960dafcae5d2a1_JaffaCakes118
-
Size
56KB
-
MD5
3a223698f544461acf960dafcae5d2a1
-
SHA1
53fb1a41ea6799d278470500b4f10802d5a9a47c
-
SHA256
f1aeafaa5cdcefbc75316014f17bee637b9f9b185c5aafdfeee99337c57d7d12
-
SHA512
8e6ad0e297e5b8e53c8e7503e716ae068f780bcc7c7feb5f8d8804f5224c32f6b416172c34db9047938f1b8198ead99826f061fe4bad2da4e3ccfaa44300957d
-
SSDEEP
768:7jmuUZGBbiB99D5X+Ir+noNZzVXF6ZUN4UyIKuIQNU5qV2D:mzM8X2oNj8xLXQcD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a223698f544461acf960dafcae5d2a1_JaffaCakes118
Files
-
3a223698f544461acf960dafcae5d2a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
a84e326ec02a7b7f378996099b083b30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringA
lstrcatA
lstrcpyA
lstrlenA
GetModuleFileNameA
lstrcmpiA
lstrcpynA
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
WritePrivateProfileStringA
HeapReAlloc
VirtualAlloc
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetPrivateProfileIntA
LocalAlloc
LocalFree
GetCPInfo
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
LCMapStringW
user32
MessageBoxA
wsprintfA
shell32
ShellExecuteA
ws2_32
WSACleanup
htons
gethostbyname
closesocket
connect
WSAStartup
socket
krnlapi
ord1
ord2
ord3
ord6
ord7
ord10
ord5
ord11
ord13
dibtodib
ord1
ord14
ord2
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lea Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE