Static task
static1
Behavioral task
behavioral1
Sample
3a38e5081af94fb0e850c44eb3d2f767_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3a38e5081af94fb0e850c44eb3d2f767_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a38e5081af94fb0e850c44eb3d2f767_JaffaCakes118
-
Size
118KB
-
MD5
3a38e5081af94fb0e850c44eb3d2f767
-
SHA1
e22aad4236236b94ff46a9f431e89e385a6a57d0
-
SHA256
6a4907ce81f32d1d93274f1cb42a191ea688294161454746bf1cb1cd009c3e65
-
SHA512
37d95e786ca859568d67708ffb529a8304838a719afe26c6dc2ac2d8adcface6bbb922eb551b1b7f1c6b441f29a7db3cc227f5224cb05123c30b02f1ab658ce4
-
SSDEEP
3072:DN5AhMSaLOApaGCAteJVZKuWY6R2JwFcPuFFFFBFFFF2V:R6gLON5WY6RrA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a38e5081af94fb0e850c44eb3d2f767_JaffaCakes118
Files
-
3a38e5081af94fb0e850c44eb3d2f767_JaffaCakes118.exe windows:4 windows x86 arch:x86
f6115be5ed2acfc07fde4afbd52e373f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr71
_utime
_stat
wcscpy
wcscat
wcscmp
wcslen
mktime
sprintf
fputs
ctime
time
_stricmp
_wcsicmp
remove
??2@YAPAXI@Z
fseek
ftell
__CxxFrameHandler
strncpy
fclose
fopen
memmove
strstr
strtol
swprintf
_controlfp
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
??1type_info@@UAE@XZ
??3@YAXPAX@Z
_purecall
kernel32
CreateFileW
CloseHandle
RemoveDirectoryW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
MultiByteToWideChar
WideCharToMultiByte
GetSystemDirectoryW
GetVersionExA
DeleteFileA
MoveFileA
LoadLibraryA
GetLastError
CreateDirectoryW
FindFirstFileA
FindNextFileA
WinExec
GetProcAddress
FreeLibrary
ReleaseMutex
CreateMutexA
WaitForSingleObject
GetStartupInfoA
GetModuleHandleA
GetFileAttributesW
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCreateKeyExA
RegSetValueExA
ole32
CoTaskMemFree
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE