Static task
static1
Behavioral task
behavioral1
Sample
3ab5fc0dcfb4f071db7268ccabd6e05c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3ab5fc0dcfb4f071db7268ccabd6e05c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ab5fc0dcfb4f071db7268ccabd6e05c_JaffaCakes118
-
Size
48KB
-
MD5
3ab5fc0dcfb4f071db7268ccabd6e05c
-
SHA1
be1b73b6ee62ee9c29eb98ee0b142f44b32942d8
-
SHA256
80de3ce51f71cbf5f8a29de4287f3e2b2dde1bef9ef1a7d3877ff8258b5fe1a1
-
SHA512
87f184ca23c8ffdb34464e0e6acb609c562e859b7a9ae3143b06e158827f54e0d25d2db47af592c53f100c2a36120252eb99bd4acc4c7ee2c2305322b9d28837
-
SSDEEP
768:7Lp1PiF3p4jrnYfRYATBkIp5L1H5Je+msS//i4xxQv:7F5iFijrnORYY91mD/i4xxQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ab5fc0dcfb4f071db7268ccabd6e05c_JaffaCakes118
Files
-
3ab5fc0dcfb4f071db7268ccabd6e05c_JaffaCakes118.exe windows:4 windows x86 arch:x86
ff3357c629adaa00f6f0d86be23f113e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileTime
GetFileTime
CopyFileA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetModuleHandleA
GetProcessHeap
ResumeThread
GetPriorityClass
OpenProcess
VirtualAlloc
VirtualFree
GetCurrentProcessId
SetLastError
CreateRemoteThread
GetProcAddress
FreeLibrary
GetVersionExA
GlobalMemoryStatus
CloseHandle
user32
CharLowerA
advapi32
OpenProcessToken
LookupPrivilegeValueA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
Sections
.pelock Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE