Static task
static1
Behavioral task
behavioral1
Sample
3a86a28119fba1a22bbff46a729bcf19_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a86a28119fba1a22bbff46a729bcf19_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a86a28119fba1a22bbff46a729bcf19_JaffaCakes118
-
Size
18KB
-
MD5
3a86a28119fba1a22bbff46a729bcf19
-
SHA1
a3327a06839db03bb9a35d9bf2f423a0b2681edd
-
SHA256
49db3265b840a458889d206abdf0a779939e98a0e0dae836e54658d4ed097f5c
-
SHA512
5a69a1d29f71fdbdd4a3739f1df02e281ec6a910fd0894a7c649be83fe8407158e649d62260805c0e5df300b5302517d8f080832f6ff541ecf5ac89b9cdf3a1b
-
SSDEEP
384:usGrQh8dUFW7U+MwpvCn4jAcaU+6GlVla0zx:xGEzFWAHgvCn4h/lga09
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a86a28119fba1a22bbff46a729bcf19_JaffaCakes118
Files
-
3a86a28119fba1a22bbff46a729bcf19_JaffaCakes118.exe windows:4 windows x86 arch:x86
5c5e7200159bd5bd5b00c95137988857
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetCurrentThread
HeapDestroy
GlobalMemoryStatus
GetCurrentProcessId
HeapQueryInformation
GetLogicalDrives
GetTimeFormatA
HeapCreate
VirtualProtect
GetTapeStatus
InterlockedExchange
CreateIoCompletionPort
LoadLibraryExA
GetModuleHandleA
GetStdHandle
GetEnvironmentStringsA
GetACP
GetProcessVersion
IsDebuggerPresent
GetProcessHeap
user32
GetCursorPos
GetWindow
DrawTextA
wsprintfA
EndPaint
ReleaseDC
GetTitleBarInfo
DragDetect
GetClassNameA
GetParent
SetActiveWindow
ShowWindow
SetForegroundWindow
FrameRect
GetWindowTextLengthA
GetDlgItem
BeginPaint
FillRect
GetFocus
advapi32
RegEnumKeyA
RegSetValueExA
RegCreateKeyA
RegFlushKey
RegCloseKey
setupapi
SetupCloseLog
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ