Static task
static1
Behavioral task
behavioral1
Sample
3b4a0beed6d38bc4aae6ac99b581b8ad_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3b4a0beed6d38bc4aae6ac99b581b8ad_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b4a0beed6d38bc4aae6ac99b581b8ad_JaffaCakes118
-
Size
342KB
-
MD5
3b4a0beed6d38bc4aae6ac99b581b8ad
-
SHA1
ad4385212e090bece5cb748a82f4146726fc9682
-
SHA256
21c014362c0ff1382401b905e994b10369f4ca203cf504f4b62d465c293cefec
-
SHA512
357f4c54d9920d854e59db2af30d6bebc4e9eeac017e1908f5922b491b8a540386e850604caaebafccb35c48b1f517f3f5d79e4f4f74d094c476923ed1cf6df7
-
SSDEEP
6144:lht8YveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gIU7Fc:SYvDsakbClM2pxYB3CuM/xJUy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b4a0beed6d38bc4aae6ac99b581b8ad_JaffaCakes118
Files
-
3b4a0beed6d38bc4aae6ac99b581b8ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
660f1be7393c478d018ae161049e9fec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMailslotA
LoadLibraryExA
LocalFree
GlobalLock
GetConsoleCP
IsDebuggerPresent
HeapCreate
FindClose
GetLastError
IsBadReadPtr
FreeEnvironmentStringsA
CloseHandle
GetACP
GlobalUnlock
CreateFileA
lstrlenA
CreateFileMappingA
GetStdHandle
GetModuleHandleA
CreateEventA
user32
RedrawWindow
CheckMenuItem
GetDlgItem
DispatchMessageA
GetListBoxInfo
GetDlgItemTextA
GetDC
GetMessageA
DialogBoxParamA
SetFocus
GetIconInfo
EndDialog
IsMenu
DrawIconEx
uxtheme
GetThemeMetric
EnableTheming
GetThemeColor
CloseThemeData
DrawThemeIcon
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ