Static task
static1
Behavioral task
behavioral1
Sample
3c484d32aeb086c25c67f109141e9374_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3c484d32aeb086c25c67f109141e9374_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c484d32aeb086c25c67f109141e9374_JaffaCakes118
-
Size
638KB
-
MD5
3c484d32aeb086c25c67f109141e9374
-
SHA1
638d111a0551f56bbd20fc0c502461e295ad4df5
-
SHA256
d1ac39d459693560c17aad1e5e337cb669cc54375dd6d19f8c5f8213b95d320a
-
SHA512
e3f09926eda82d4ec834986d64b13202f058277a964c890769173404a31a574e64ad5ff534876b094164260417bcc7256d46129d7910df761980e999f5c317e0
-
SSDEEP
12288:4NfWe4IXyOzAZ7U5G7pZ+c9LVykUJz6TGCz/bS6aQqBi7:4RbXGxmkp7VJ+a/ucqU7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c484d32aeb086c25c67f109141e9374_JaffaCakes118
Files
-
3c484d32aeb086c25c67f109141e9374_JaffaCakes118.exe windows:4 windows x86 arch:x86
0642e54287154f518e47b3390679cbe6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
HeapCreate
GlobalUnlock
GetVersion
HeapReAlloc
LoadLibraryA
lstrlenA
GetStdHandle
VirtualProtect
GetTickCount
CloseHandle
WaitForSingleObject
WaitForMultipleObjects
GetProfileIntA
GetConsoleCP
TlsFree
GetSystemDefaultLangID
InterlockedExchange
GetModuleHandleA
TlsGetValue
AddAtomA
user32
ShowWindow
EqualRect
SetWindowPos
GetMenuStringA
SetPropA
DestroyMenu
EnableScrollBar
GetKeyboardLayout
MessageBoxA
LoadIconA
ModifyMenuA
GetDlgItem
GetWindowTextA
CopyRect
SubtractRect
DialogBoxParamA
PostMessageA
PaintDesktop
TranslateMessage
UpdateWindow
CreateCaret
InsertMenuA
GetMenu
DispatchMessageA
InflateRect
msi
MsiGetMode
MsiEnumProductsA
MsiEnumClientsA
MsiDoActionA
MsiCloseHandle
ws2_32
WSAAccept
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ