Static task
static1
Behavioral task
behavioral1
Sample
3f0fc6e4430c19641e1fd022fa9432c7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3f0fc6e4430c19641e1fd022fa9432c7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f0fc6e4430c19641e1fd022fa9432c7_JaffaCakes118
-
Size
199KB
-
MD5
3f0fc6e4430c19641e1fd022fa9432c7
-
SHA1
6217d6d837262eb18ba0c2e373ddea897ec3d174
-
SHA256
d41505bb8078b8cfe41b1c527ecce2b0c6e557308b0be4a795dd7c205670bc2a
-
SHA512
c30b7d03a99a43743fbf720d8f13607318c42406723941c89c78d14de35e15f77ce6e125a09be47978d0ec1ced71b2ca50d3c8829650a9ef2900e74e13f10d03
-
SSDEEP
3072:ZuJjLOqZrHSmxxfxuk5bGG8WjMo/SbTmi8sODhhaEfGsMYD1tpLoSo9gq:gjLh+kmZOVZnMYB2u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f0fc6e4430c19641e1fd022fa9432c7_JaffaCakes118
Files
-
3f0fc6e4430c19641e1fd022fa9432c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
6e7ebee4c777960e95b9f642bec6c2ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
lstrlenA
QueryPerformanceCounter
DeleteFileW
GlobalFindAtomW
CopyFileA
LoadLibraryW
GetTickCount
GetCurrentProcessId
Sleep
MulDiv
RemoveDirectoryA
lstrcmpiA
GetACP
GetWindowsDirectoryA
GetModuleHandleA
GetUserDefaultLangID
SetLastError
GetCommandLineW
GetLastError
DeleteFileA
GetCurrentThreadId
GetCurrentThread
lstrcmpA
GlobalFindAtomA
GetProcessHeap
GetThreadLocale
SetCurrentDirectoryA
GetDriveTypeA
lstrcmpiW
GetCommandLineA
GetModuleHandleW
lstrlenW
GetConsoleOutputCP
GetOEMCP
IsDebuggerPresent
GetVersion
VirtualAlloc
GetStartupInfoA
user32
GetSystemMetrics
GetDC
CharNextA
GetDesktopWindow
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ