Static task
static1
Behavioral task
behavioral1
Sample
3c3c69ce675cb07cea85416bdaa9bd0a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c3c69ce675cb07cea85416bdaa9bd0a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c3c69ce675cb07cea85416bdaa9bd0a_JaffaCakes118
-
Size
892KB
-
MD5
3c3c69ce675cb07cea85416bdaa9bd0a
-
SHA1
666271bd1883485244a820a95b750414ab243bd5
-
SHA256
aaeb7f7a6ded13b166d0fb83ca744fd83e95bd9c7598c67c3479d4281e01ff53
-
SHA512
d2e3e447ff6cf138ebdabdbb9dcf787d17f81aed15737aead61838d3d463896326f0f0a0bb68cd3beb3f7319b08875eeb694f68ca4288c1b6a0a8a0ac7d2a615
-
SSDEEP
24576:w6L1zgo3mzC7znV8hrUGpxWTCePJdLVuZ+t3LiKoF:V192u7znmhrUgxWV+At3L7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c3c69ce675cb07cea85416bdaa9bd0a_JaffaCakes118
Files
-
3c3c69ce675cb07cea85416bdaa9bd0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
4c47d6cb7d055efc377feec933793330
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
GetDriveTypeA
FindClose
GetPrivateProfileStringA
GetModuleFileNameA
GetShortPathNameA
GetVersionExA
MoveFileExA
WritePrivateProfileStringA
GetTempPathA
GetFullPathNameA
SetFileTime
GetWindowsDirectoryA
GlobalHandle
lstrcatA
LocalAlloc
WinExec
GetDiskFreeSpaceA
FindFirstFileA
GlobalAlloc
WriteFile
GlobalUnlock
GlobalFree
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetCurrentProcess
TerminateProcess
ExitProcess
GetLastError
MoveFileA
CloseHandle
DeleteFileA
RaiseException
LocalFree
SetFileAttributesA
SetFilePointer
GetCurrentDirectoryA
SetEnvironmentVariableA
SetCurrentDirectoryA
HeapFree
HeapAlloc
CreateDirectoryA
HeapSize
RtlUnwind
HeapCompact
ReadFile
IsBadReadPtr
CreateFileA
GetStringTypeA
LoadLibraryA
GlobalLock
GetFileAttributesA
GetStringTypeW
IsBadCodePtr
GetProcAddress
user32
DestroyWindow
SetWindowPos
SendMessageA
GetSysColor
GetWindow
GetDlgItem
ScreenToClient
GetWindowRect
BeginPaint
EndPaint
FillRect
ReleaseDC
GetClientRect
SetWindowLongA
GetDC
SetDlgItemTextA
wsprintfA
SetWindowTextA
GetSystemMetrics
GetParent
PostMessageA
GetDlgItemTextA
OemToCharA
CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassA
FindWindowA
GetLastActivePopup
BringWindowToTop
AdjustWindowRectEx
UpdateWindow
IsIconic
RedrawWindow
PostQuitMessage
DefWindowProcA
ShowWindow
KillTimer
SetTimer
SetFocus
DialogBoxIndirectParamA
EndDialog
EnableWindow
MessageBoxA
CreateDialogIndirectParamA
IsDialogMessageA
GetMessageA
TranslateMessage
DispatchMessageA
RegisterWindowMessageA
gdi32
CreateFontIndirectA
GetSystemPaletteEntries
CreateSolidBrush
DeleteObject
GetStockObject
ExtTextOutA
SetBkColor
GetObjectA
GetDeviceCaps
StretchDIBits
CreatePalette
SelectPalette
IntersectClipRect
RealizePalette
SetTextColor
SetBkMode
TextOutA
SelectObject
DeleteDC
CreateDIBPatternBrush
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
comdlg32
GetSaveFileNameA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
VerFindFileA
comctl32
ord17
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ