Static task
static1
Behavioral task
behavioral1
Sample
3a23aafb729a1d4f60608a43fc7b744a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a23aafb729a1d4f60608a43fc7b744a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a23aafb729a1d4f60608a43fc7b744a_JaffaCakes118
-
Size
23KB
-
MD5
3a23aafb729a1d4f60608a43fc7b744a
-
SHA1
1598d8ae3038f8e8bc1a7be00b4fba70c15e1a86
-
SHA256
131b17a7a1f6acdb979974a9ef9ed60ba80509d71981c970ffb1f004cc7b902f
-
SHA512
67bb4e3b0866d38b097d6c0cebb32e4bea07b13a4a092742e939ed0f912354bdf41bc9664cb5384fdae002543bddca52348db26f8d0c5c6c52c9514c7303e1d6
-
SSDEEP
384:zXP3JinPozoru2lQzIFb1fJ++DY9xk/JkucARGFCpu4eEUuBXr6BhL5rO:IlsUb1ryik8GIpuiTrG/y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a23aafb729a1d4f60608a43fc7b744a_JaffaCakes118
Files
-
3a23aafb729a1d4f60608a43fc7b744a_JaffaCakes118.exe windows:5 windows x86 arch:x86
5e54ca04eca80fd23afe92cb3fc364ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
HeapFree
GetProcessHeap
GetLastError
GetACP
InterlockedDecrement
SystemTimeToFileTime
SetUnhandledExceptionFilter
SetHandleCount
EndUpdateResourceA
DeleteFileA
lstrcpyW
Sleep
FreeEnvironmentStringsW
LoadResource
OutputDebugStringA
lstrlenW
GlobalUnlock
CloseHandle
MulDiv
ExitProcess
VirtualAlloc
HeapSize
FindFirstFileA
HeapCreate
GetSystemDirectoryA
lstrcpyA
SetEvent
SetErrorMode
HeapAlloc
WriteConsoleW
InterlockedIncrement
ReleaseMutex
GlobalAlloc
IsDebuggerPresent
InterlockedExchange
GetConsoleOutputCP
IsValidCodePage
UnhandledExceptionFilter
GetModuleFileNameW
user32
EndPaint
shell32
PifMgr_OpenProperties
IsNetDrive
PickIconDlg
SHCoCreateInstance
Shell_GetImageLists
IsLFNDrive
DAD_DragEnterEx
DllCanUnloadNow
SHDefExtractIconW
DllGetVersion
Shell_MergeMenus
SHChangeNotifyDeregister
DllRegisterServer
DragFinish
SHChangeNotifyRegister
advapi32
RegCreateKeyW
RegQueryInfoKeyW
setupapi
SetupInstallFromInfSectionA
Sections
.textbss Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ