Static task
static1
Behavioral task
behavioral1
Sample
3c07707925c85a3a715000761b836546_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3c07707925c85a3a715000761b836546_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c07707925c85a3a715000761b836546_JaffaCakes118
-
Size
188KB
-
MD5
3c07707925c85a3a715000761b836546
-
SHA1
967d4a3927e73788b4b7b99263bc6c8075a6f230
-
SHA256
985ec8670e24ddb3e9974c394189bfb4d0de426fa2a918b4279be654b5eb9c4f
-
SHA512
a5ec2062d7d5bdb522a220a7690933dfee83a4a525d84e8199f0b545d975d1f98182b7b438d00f6a11f6f13dabdfdb1279e95e53fe5ff8ccadc67356252bb57a
-
SSDEEP
3072:FufOPs/zKhjUwyz5ywGP4D9Hn3JD4sfW6dxtVyEz5QIKWBMP8JRbQ79q+ifwq:FX07Kg5/7DNZD4s+6dTVybYCoRbCg+i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c07707925c85a3a715000761b836546_JaffaCakes118
Files
-
3c07707925c85a3a715000761b836546_JaffaCakes118.exe windows:5 windows x86 arch:x86
604102aac74b57d34de51ac20b070725
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
hooklogin
?StartInject@@YAIPAUHWND__@@0@Z
user32
DestroyMenu
gdi32
SetMapMode
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
advapi32
RegQueryValueExW
shell32
ShellExecuteW
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameW
oledlg
OleUIBusyW
ole32
CoRevokeClassObject
oleaut32
SysAllocStringLen
psapi
GetModuleBaseNameW
Sections
.text Size: 174KB - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE