Static task
static1
Behavioral task
behavioral1
Sample
3c12231f3a205afa1bac3d737ee9de91_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3c12231f3a205afa1bac3d737ee9de91_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3c12231f3a205afa1bac3d737ee9de91_JaffaCakes118
-
Size
177KB
-
MD5
3c12231f3a205afa1bac3d737ee9de91
-
SHA1
2b2b927b86343e27403fb4b1d8e1658972f75fb4
-
SHA256
6f785198026210c21e1792b7fff70ac8db98ff540b994f9e0c7d16a85bd2d9d9
-
SHA512
1e759c57ab143ab433f0f22fc7b885037fa435447745dc4736cb59c86b96b67d6077b2713bfff21dd83c4123db4e9b784f66dd786c4a704c78b6b42cfa486f1b
-
SSDEEP
3072:tvdcV7H31w2Kd9CG8iAlV4wtbkhtV3bczwN+gUHMMzJ6zBfwcj37x2yg0grLibTS:92VHm7d9CGCv5q3cy+gKMMzoz+S3dFgf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c12231f3a205afa1bac3d737ee9de91_JaffaCakes118
Files
-
3c12231f3a205afa1bac3d737ee9de91_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e65b581a17f4daf6e96f007d8bdb7bc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetKeyboardType
MessageBoxA
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
advapi32
RegQueryValueExA
oleaut32
SysFreeString
SafeArrayPtrOfIndex
urlmon
URLDownloadToFileA
Sections
.text Size: 20KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE