Static task
static1
Behavioral task
behavioral1
Sample
3a5754639b733d5f82d4aabac87bb688_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3a5754639b733d5f82d4aabac87bb688_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a5754639b733d5f82d4aabac87bb688_JaffaCakes118
-
Size
388KB
-
MD5
3a5754639b733d5f82d4aabac87bb688
-
SHA1
6df0aaf721f0d2025cc7a7c88710314537222754
-
SHA256
91e94a8aa21ff008dc28aaf1da3c58a8952958bc3ae10e46191dc2a4ef328074
-
SHA512
bf9ce4a873a6cf491e65e416f248226784aff99767a4b0e09aae58d5cbe08d43871574ef7ca86ec5215b581f4c7e9abbf997dad39127e6f8e8ad3fbf4d77c1ab
-
SSDEEP
12288:9pc5dngXy0xYfALKEJx7WZU1tWMidZmoIC4u:9Idng9KAL5Jx7W6z2dVIC4u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a5754639b733d5f82d4aabac87bb688_JaffaCakes118
Files
-
3a5754639b733d5f82d4aabac87bb688_JaffaCakes118.exe windows:4 windows x86 arch:x86
521d8bd580104fba69d67f338368c576
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDialogBaseUnits
BroadcastSystemMessageA
LoadIconA
GetSubMenu
IsCharLowerW
SetMenuInfo
SetDoubleClickTime
RegisterClassExA
RegisterClassA
TabbedTextOutA
ShowOwnedPopups
wininet
FindFirstUrlCacheEntryExW
InternetSecurityProtocolToStringW
FtpGetFileA
FtpGetFileW
comdlg32
ChooseFontA
ReplaceTextA
ChooseColorA
kernel32
GetTickCount
LeaveCriticalSection
WideCharToMultiByte
GetLocaleInfoW
TlsGetValue
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
GetFileType
GetCPInfo
GlobalFlags
CreateFileA
IsValidLocale
InterlockedExchange
WriteFile
GetStartupInfoA
SetComputerNameA
VirtualFree
HeapSize
GetCurrentThreadId
CompareStringA
VirtualQuery
CompareStringW
GetPrivateProfileSectionNamesW
CreateMutexA
QueryPerformanceCounter
LCMapStringA
LCMapStringW
GetCurrentThread
GetLastError
EnumSystemLocalesA
GetOEMCP
GetStdHandle
EnterCriticalSection
GetCurrentProcess
GetConsoleCP
WriteConsoleW
lstrcatA
GetStringTypeA
HeapAlloc
TlsFree
GetUserDefaultLCID
ReadFile
TerminateProcess
FreeEnvironmentStringsW
SetLastError
IsDebuggerPresent
OpenMutexA
SetEnvironmentVariableA
GetACP
Sleep
SetFilePointer
CloseHandle
SetStdHandle
SetConsoleCtrlHandler
GetCommandLineA
OpenWaitableTimerW
RtlUnwind
SetUnhandledExceptionFilter
FlushFileBuffers
GetProcAddress
GetTimeZoneInformation
VirtualAlloc
GetPriorityClass
LoadLibraryA
HeapDestroy
SetHandleCount
FreeLibrary
InterlockedIncrement
TlsAlloc
GetEnvironmentStringsW
ExitProcess
GetModuleHandleA
GetLocaleInfoA
HeapFree
GetSystemTimeAsFileTime
GetConsoleMode
GetModuleFileNameW
DeleteCriticalSection
TlsSetValue
HeapReAlloc
UnhandledExceptionFilter
SetPriorityClass
GetCommandLineW
GetStringTypeW
LoadResource
GetTimeFormatA
GetProfileIntW
GetStartupInfoW
FindResourceA
MultiByteToWideChar
GetCurrentProcessId
WriteConsoleA
GetModuleFileNameA
HeapCreate
GetDateFormatA
IsValidCodePage
GetConsoleOutputCP
GetModuleHandleW
comctl32
InitCommonControlsEx
Sections
.text Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 209KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ