Static task
static1
Behavioral task
behavioral1
Sample
3bed9d8fa37533e3e69fa7ef33899e20_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3bed9d8fa37533e3e69fa7ef33899e20_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3bed9d8fa37533e3e69fa7ef33899e20_JaffaCakes118
-
Size
19KB
-
MD5
3bed9d8fa37533e3e69fa7ef33899e20
-
SHA1
be9bbcba9218c680c2febee889af5ec0715e7704
-
SHA256
20366aa15d68815bbdbe1f32d56bb0f3e802ce02fa738d104a5daf5a936469b8
-
SHA512
de623c5891d1272689720cff9126d8245b643a2cb8791da76010cb9f72821864d6092a88ff5552f787796c924ef220128a96bb003cc870de2f7597e3c6f7f86e
-
SSDEEP
192:6+cCqMqTYKXjrEjXeMj+a7ZZfpR6J6qCnDwBM1LUapzG9yHMHPG:ZcChqnzOOBa7ZZfaUEMCgHb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bed9d8fa37533e3e69fa7ef33899e20_JaffaCakes118
Files
-
3bed9d8fa37533e3e69fa7ef33899e20_JaffaCakes118.exe windows:4 windows x86 arch:x86
1d6d9c982ff8fc3bf1461ec2bd04647f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
TlsFree
GetVersion
WaitForMultipleObjects
CloseHandle
HeapReAlloc
GetModuleHandleA
LoadLibraryExA
GetTickCount
AddAtomA
GetConsoleCP
GetStdHandle
WaitForSingleObject
InterlockedExchange
VirtualProtect
GetSystemDefaultLangID
HeapCreate
CompareFileTime
lstrlenA
GetProfileIntA
GlobalUnlock
user32
PaintDesktop
CopyRect
EnableScrollBar
SubtractRect
ShowWindow
DestroyMenu
InsertMenuA
FindWindowA
GetKeyboardLayout
DispatchMessageA
SetWindowPos
EqualRect
CreateCaret
SetPropA
GetWindowTextA
GetKeyState
PostMessageA
TranslateMessage
GetMenuStringA
GetDlgItem
CreateCursor
UpdateWindow
MessageBoxA
ModifyMenuA
DialogBoxParamA
atl
AtlAdvise
AtlUnadvise
AtlSetErrorInfo
AtlModuleInit
AtlGetVersion
dnsapi
DnsStatusString
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ