Static task
static1
Behavioral task
behavioral1
Sample
3a8e01e08790845c797512ee12fe67f8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3a8e01e08790845c797512ee12fe67f8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a8e01e08790845c797512ee12fe67f8_JaffaCakes118
-
Size
150KB
-
MD5
3a8e01e08790845c797512ee12fe67f8
-
SHA1
5db20e3188542b11c80239c7fde0444ba5ed8661
-
SHA256
3cbf1385f61324741985284830f3950a1d214446ba4633e738593b1338816037
-
SHA512
6cdf16cdf8e29d61a337925ddeb2d360c8be884d4991a96a4dd340164921739c2c73e0203d15b5682925ef43b51590d873a71292fa4741c5ea00dad76b92758a
-
SSDEEP
3072:Fmn8D5BMgSt6938QyNvWfWcZcGAHciJfykrCJl2ddFff2:FY8NBMFt2s9vWfWLmeqkrCJwddFH2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a8e01e08790845c797512ee12fe67f8_JaffaCakes118
Files
-
3a8e01e08790845c797512ee12fe67f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
cfb893102dd0d0cb258d5b3cba3c0edd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetConsoleCP
GetModuleHandleA
SetLastError
LoadLibraryExA
WaitForSingleObject
LocalLock
HeapCreate
PeekConsoleInputA
GetUserDefaultLCID
GetSystemTime
GlobalSize
GetCommandLineA
VirtualProtect
ResumeThread
LockResource
GetAtomNameA
GetACP
TlsGetValue
InterlockedExchange
lstrlenA
user32
FrameRect
FillRect
CreateIcon
GetWindow
ShowWindow
wsprintfA
DrawTextA
SetForegroundWindow
GetTitleBarInfo
EndPaint
BeginPaint
GetClassNameA
DragDetect
GetParent
GetCursorPos
GetDC
ReleaseDC
GetFocus
AnyPopup
ntshrui
GetLocalPathFromNetResourceA
DllGetClassObject
SetFolderPermissionsForSharing
DllCanUnloadNow
GetNetResourceFromLocalPathA
wshtcpip
WSHIoctl
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ