Static task
static1
Behavioral task
behavioral1
Sample
3c3b48aa62f53090d4db6b67cf1513dc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c3b48aa62f53090d4db6b67cf1513dc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c3b48aa62f53090d4db6b67cf1513dc_JaffaCakes118
-
Size
144KB
-
MD5
3c3b48aa62f53090d4db6b67cf1513dc
-
SHA1
687e17e21bc3b20c0a5f8c3dd32afd4286a78e85
-
SHA256
77f4cf671ccb7c6a9c13b4961d927df77d9b89e479d0dd2180cc7851dca11dcb
-
SHA512
9098975ecd749ded33f8045c0efa4e3728f4d9f3a9db5bd6bd2f7f2047e28ed6b21c91672f01a1b058be2e495743096a38eea09ab68b3356010cbd2a4b9857e3
-
SSDEEP
1536:H6YzF+8SyzCwutg7SkNGRKzc/bLlFT1sJDBOurXHgz5S+N3++uRvaRDKj2z:HN+eutMSkNkKzattyVO+XuQu3jvDKj2z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c3b48aa62f53090d4db6b67cf1513dc_JaffaCakes118
Files
-
3c3b48aa62f53090d4db6b67cf1513dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
e87a92f20cb49f1e8d0b8b2ade67c325
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetVersionExA
WideCharToMultiByte
GetLastError
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetProcAddress
FreeLibrary
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapAlloc
GetProcessHeap
GetStartupInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetCPInfo
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetFilePointer
GetConsoleCP
GetConsoleMode
user32
GetMessageA
DispatchMessageA
TranslateMessage
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ada Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE