Static task
static1
Behavioral task
behavioral1
Sample
3f35bf980c58eafe3ba5a4cccc53b82e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3f35bf980c58eafe3ba5a4cccc53b82e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f35bf980c58eafe3ba5a4cccc53b82e_JaffaCakes118
-
Size
89KB
-
MD5
3f35bf980c58eafe3ba5a4cccc53b82e
-
SHA1
faa2178d97e6da6424cfccde505fcecfc48da1e4
-
SHA256
ad46e4181d654e0bf6840987ca1205b264cd303803c0e5447a9bef55ce7a55a8
-
SHA512
9d5fc6068e20ed6d95a7b372be3e4df7d7f0d29947f743458d590a03635f204260499be800206ee79e70f7ae19ef5d6c314b50eea49fb1e36cfa5657b7276c14
-
SSDEEP
1536:6lv7irduhbOAetTNOinDrZhQcnprVF9TGyjc:6lCdHAeB4idpxF9iyw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f35bf980c58eafe3ba5a4cccc53b82e_JaffaCakes118
Files
-
3f35bf980c58eafe3ba5a4cccc53b82e_JaffaCakes118.exe windows:4 windows x86 arch:x86
b32af7450be60ff1436439adca14578c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDiskFreeSpaceA
AddAtomA
GetTickCount
HeapDestroy
GetLastError
FindVolumeClose
SearchPathA
FindResourceExA
TlsGetValue
SetEvent
GetModuleHandleA
VirtualProtect
ReleaseMutex
lstrlenA
GetConsoleFontSize
CloseHandle
Sleep
CreateThread
DeleteCriticalSection
ExitProcess
user32
CreateMenu
DragDetect
CopyIcon
GetScrollBarInfo
CloseWindow
EndDialog
EnableWindow
DialogBoxParamA
IsIconic
DispatchMessageA
GetMessageA
CreateWindowExA
GetKeyState
CopyImage
hlink
HlinkNavigate
HlinkClone
HlinkIsShortcut
HlinkTranslateURL
HlinkResolveShortcut
shell32
DragQueryFileA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE