Static task
static1
Behavioral task
behavioral1
Sample
3b48ec9e2fc4950e5b03ea2518b4ef57_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b48ec9e2fc4950e5b03ea2518b4ef57_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b48ec9e2fc4950e5b03ea2518b4ef57_JaffaCakes118
-
Size
316KB
-
MD5
3b48ec9e2fc4950e5b03ea2518b4ef57
-
SHA1
b159d99b4e0483503cb0f8fc387cd8baab911419
-
SHA256
fb69ff6b01922dd4027dd03991a83fb938d3852d898c4a682589581c8c13f230
-
SHA512
5eb66c43090faf074958e61781be7ff5862aa29d26bb0640db1a1e9ba6dd10c335b8960bb96f8b276dac1fd1e4642462888526c5d5e80057981786f6b368b02b
-
SSDEEP
6144:sEIYuPw/9w1q7+MR9huda/hPxS2sJ4EQqhZ7Su+TxGbxhwlxDxNRt7qe6p+YES3:sJYuY/9w1gzRnua/hRcNQyEuo0TKxRBp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b48ec9e2fc4950e5b03ea2518b4ef57_JaffaCakes118
Files
-
3b48ec9e2fc4950e5b03ea2518b4ef57_JaffaCakes118.exe windows:4 windows x86 arch:x86
9b700a79331fd13fa147e1e7f852dd6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
QueueUserAPC
Beep
LoadLibraryA
FindNextFileW
SystemTimeToFileTime
WaitForSingleObject
QueryPerformanceFrequency
EnterCriticalSection
GetBinaryTypeW
VirtualProtect
GetDateFormatW
GetWindowsDirectoryA
WinExec
SetEnvironmentVariableW
ExitProcess
SetWaitableTimer
EnumResourceLanguagesW
MapViewOfFileEx
RaiseException
GetDiskFreeSpaceA
ReadConsoleW
ReadFile
GetDriveTypeW
SetPriorityClass
lstrcpyA
IsBadStringPtrW
ReadDirectoryChangesW
FormatMessageA
lstrcpynA
FreeConsole
GetStringTypeA
SetFileApisToOEM
MulDiv
GetLongPathNameW
CloseHandle
GetFileAttributesExA
WritePrivateProfileSectionA
GetThreadLocale
GetVersionExA
GetCommandLineA
_lopen
user32
SetWindowTextA
GetScrollBarInfo
SetPropW
CopyRect
SetRectEmpty
GrayStringA
GetCaretPos
GetSystemMenu
SystemParametersInfoW
ExcludeUpdateRgn
DrawCaption
SetDlgItemTextW
BringWindowToTop
GetSubMenu
SetMenuItemInfoW
SendMessageW
IsCharLowerA
CharLowerBuffW
GetMenuState
GetProcessWindowStation
GetIconInfo
FillRect
OemToCharBuffW
TrackPopupMenu
CreateDesktopW
GetDlgItemTextW
GetCursor
UnregisterHotKey
CharUpperW
LoadAcceleratorsW
SetScrollInfo
DefWindowProcA
TrackMouseEvent
CreateDialogIndirectParamW
IntersectRect
CharNextA
gdi32
GetClipRgn
GetTextColor
GetTextExtentPoint32A
PolylineTo
StrokeAndFillPath
GetTextExtentPointA
SetPaletteEntries
GetRgnBox
CreateDCW
SetTextColor
GetPolyFillMode
DeleteObject
SetWorldTransform
PolyBezierTo
GetObjectW
CreateBrushIndirect
GetEnhMetaFilePaletteEntries
CombineRgn
GetPaletteEntries
comdlg32
FindTextW
PageSetupDlgA
advapi32
RegSetValueA
DuplicateToken
GetSecurityDescriptorLength
CreatePrivateObjectSecurity
RegOpenKeyW
shell32
SHGetPathFromIDListA
SHFileOperationA
SHChangeNotify
ExtractIconExW
DragAcceptFiles
ole32
CoMarshalInterface
OleRegGetMiscStatus
OleSetClipboard
StgCreateDocfileOnILockBytes
OleDestroyMenuDescriptor
oleaut32
SysReAllocStringLen
GetActiveObject
SafeArrayAccessData
LoadTypeLi
VariantChangeTypeEx
VariantCopyInd
GetErrorInfo
VariantCopy
SafeArrayGetElement
comctl32
ImageList_DragMove
ImageList_DragEnter
ord17
ImageList_GetIconSize
shlwapi
PathCompactPathW
wnsprintfA
StrTrimW
PathIsURLW
SHRegGetBoolUSValueA
StrTrimA
StrFormatByteSizeW
StrChrA
StrChrW
StrFormatByteSize64A
setupapi
SetupInstallFromInfSectionW
SetupDiGetDeviceInstallParamsW
SetupGetStringFieldA
SetupDiEnumDeviceInterfaces
SetupGetBinaryField
SetupDiClassNameFromGuidW
SetupDiSetDeviceInstallParamsW
SetupOpenLog
SetupDiClassGuidsFromNameW
SetupDiGetClassDescriptionW
Sections
.text Size: 288KB - Virtual size: 285KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE