Static task
static1
Behavioral task
behavioral1
Sample
3a6d36b60803efc51cbaf50f465be867_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3a6d36b60803efc51cbaf50f465be867_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a6d36b60803efc51cbaf50f465be867_JaffaCakes118
-
Size
142KB
-
MD5
3a6d36b60803efc51cbaf50f465be867
-
SHA1
f9489dc9aaf3b9df31c9995e0a864bd00083df18
-
SHA256
99f58105e7c0ea34b81f7a17d24837415a1fce1e08196a855ce9def7e25c1c89
-
SHA512
b06f2e4aedf228e32acfc0fff49ef417e8d93000e58a9d825b71900c8304b3de19b8080b0ad478e1b0f4d3063e1f1662d7c4aa859e49fae4b1339a9a87850047
-
SSDEEP
3072:A6tAkVZR8RMDKPW3uhSOMIamoxoh+JOhmB2T:ftA0ZTVKHMcIoph
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a6d36b60803efc51cbaf50f465be867_JaffaCakes118
Files
-
3a6d36b60803efc51cbaf50f465be867_JaffaCakes118.exe windows:4 windows x86 arch:x86
ea4e6b3bb358fa9a759ee1c9e9302d20
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetDCEx
gdi32
SetROP2
kernel32
LoadLibraryA
GetStartupInfoW
GetSystemTimeAsFileTime
WaitForSingleObject
GetStartupInfoA
LoadLibraryExA
GetSystemTime
TerminateProcess
ReadProcessMemory
LoadLibraryExW
LoadLibraryExA
CreateProcessW
LoadLibraryExW
GetSystemTimeAsFileTime
LoadLibraryExW
LoadLibraryExA
GetStartupInfoA
VirtualProtectEx
GetSystemTime
CreateFileA
GetStartupInfoA
GetSystemTimeAsFileTime
GetSystemTime
CreateFileA
DeviceIoControl
VirtualProtect
ReadFile
ReleaseMutex
GetStartupInfoA
VirtualProtect
LoadLibraryA
GetProcAddress
GetCurrentDirectoryA
GetLastError
LoadLibraryA
GetCommandLineA
SetHandleInformation
GetCommandLineA
TlsGetValue
GetCurrentProcess
GetCurrentDirectoryA
GetCurrentThread
GetCurrentThreadId
CreateProcessW
DeviceIoControl
CreateFileA
Sleep
ReleaseMutex
GetSystemTimeAsFileTime
WriteProcessMemory
Sleep
CreateFileA
WaitForSingleObject
VirtualProtectEx
TerminateProcess
ReleaseMutex
GetSystemTimeAsFileTime
SleepEx
CreateFileA
WaitForSingleObject
TerminateProcess
LoadLibraryExA
ReadProcessMemory
CreateFileA
CreateFileA
GetSystemTime
LoadLibraryA
TerminateProcess
TerminateProcess
ReadFile
LoadLibraryExA
WriteProcessMemory
VirtualProtect
DeviceIoControl
LoadLibraryExA
LoadLibraryExA
WriteProcessMemory
VirtualProtectEx
GetStartupInfoA
WaitForSingleObject
ReleaseMutex
CreateProcessW
DeviceIoControl
SleepEx
WaitForSingleObjectEx
ReadFile
LoadLibraryExW
TerminateProcess
ReadFile
LoadLibraryExA
ReleaseMutex
VirtualProtectEx
WaitForSingleObjectEx
WaitForSingleObject
ReleaseMutex
WaitForSingleObject
Sleep
WaitForSingleObject
SleepEx
LoadLibraryExW
ReadProcessMemory
LoadLibraryExW
WaitForSingleObjectEx
LoadLibraryA
ReleaseMutex
GetStartupInfoA
ReadFile
TerminateProcess
TerminateProcess
ReadFile
GetSystemTime
CreateProcessW
CreateFileA
LoadLibraryA
VirtualProtect
WaitForSingleObjectEx
VirtualProtectEx
SleepEx
CreateProcessA
ReleaseMutex
SleepEx
LoadLibraryExA
ReadFile
SleepEx
ReadFile
Sleep
DeviceIoControl
ReadProcessMemory
DeviceIoControl
SleepEx
TerminateProcess
SleepEx
ReadProcessMemory
GetStartupInfoA
CreateProcessW
ReleaseMutex
GetStartupInfoA
GetStartupInfoW
WaitForSingleObject
GetStartupInfoW
DeviceIoControl
GetStartupInfoA
LoadLibraryExW
LoadLibraryExA
VirtualProtect
ReadProcessMemory
GetSystemTimeAsFileTime
GetStartupInfoA
Sleep
TerminateProcess
GetSystemTimeAsFileTime
GetStartupInfoW
ReadProcessMemory
WriteProcessMemory
CreateFileA
WriteProcessMemory
LoadLibraryExA
WaitForSingleObjectEx
LoadLibraryExW
CreateProcessW
VirtualProtectEx
TerminateProcess
ReadProcessMemory
GetSystemTime
VirtualProtectEx
CreateFileA
GetSystemTime
GetStartupInfoW
DeviceIoControl
TerminateProcess
VirtualProtect
ReadProcessMemory
WaitForSingleObject
GetSystemTimeAsFileTime
Sections
.text Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 116KB - Virtual size: 120KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ