Static task
static1
Behavioral task
behavioral1
Sample
3bfd452e9610ab8cf576eab346cd830f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3bfd452e9610ab8cf576eab346cd830f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3bfd452e9610ab8cf576eab346cd830f_JaffaCakes118
-
Size
89KB
-
MD5
3bfd452e9610ab8cf576eab346cd830f
-
SHA1
2bd424620b74aba2db4949c9331eac94a5ac4e5e
-
SHA256
64dc85033cc34723cd09fba5ee0f0d4e4b030fe55e3f665bc9cde038cce6637b
-
SHA512
e8ef1a3b49bae90d0202bdc432e77dc472374da543ae8cd45294fdd612036c0472d1e8471b244921e6802c67eb36c43cb70cbd511fa648ca591916d2721be72c
-
SSDEEP
1536:fpShaIQ/AnNxAiiJvffxZmAdz93bZpmh:mwAN+i+JZmAlt/O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bfd452e9610ab8cf576eab346cd830f_JaffaCakes118
Files
-
3bfd452e9610ab8cf576eab346cd830f_JaffaCakes118.exe windows:4 windows x86 arch:x86
4e3da7270b6879ffde7a0945d0604aab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
GetDriveTypeA
CreateMutexA
GetCommandLineA
SearchPathA
DeleteCriticalSection
GetVolumeInformationA
EnumResourceTypesA
FreeConsole
GetComputerNameA
TlsGetValue
FindClose
ReleaseMutex
GetLastError
CloseHandle
Sleep
SetLastError
GetTickCount
VirtualProtect
GetModuleHandleA
shell32
StrChrA
ShellAboutA
SHGetDiskFreeSpaceA
DragAcceptFiles
ShellMessageBoxA
DragQueryFileA
SheChangeDirA
DragFinish
SHGetSettings
SHFree
SHGetNewLinkInfo
SHGetMalloc
DragQueryPoint
SHAlloc
glmf32
glsBinary
glsAppRef
glsComment
glsBlock
glsChannel
user32
MessageBoxA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE