Static task
static1
Behavioral task
behavioral1
Sample
3c3bcbd887e989b1922f2f99d7cf3a76_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3c3bcbd887e989b1922f2f99d7cf3a76_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c3bcbd887e989b1922f2f99d7cf3a76_JaffaCakes118
-
Size
43KB
-
MD5
3c3bcbd887e989b1922f2f99d7cf3a76
-
SHA1
488f6e4df29eb6dbcfd9feb3053f075b6f1f686a
-
SHA256
3756773af89f84daeaaabfddfa6a9366e25945ff56d56d8a15c00430dfb660f4
-
SHA512
c1caf1c82e44692723b2dca05d8eb1a8c09fb86c1f5fec77f988acef487cc29a1266db29a50a3ec675d0996efa56ac9dfd6c460523a00a2e4209549fe88020b2
-
SSDEEP
768:kbfaRpgPUsIgA2aFCkVxsqAp7e5PLK5+Y3L:yfaRp6JAtC1e1O5+o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c3bcbd887e989b1922f2f99d7cf3a76_JaffaCakes118
Files
-
3c3bcbd887e989b1922f2f99d7cf3a76_JaffaCakes118.exe windows:4 windows x86 arch:x86
f4c2c3fb6a81c0436010a13e920b37ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteAtom
DeleteFileA
FindAtomA
GetStdHandle
GetConsoleMode
CreateDirectoryA
ReadConsoleA
GetLastError
CopyFileA
CopyFileExW
CreateProcessA
CopyFileW
CreateThread
CopyFileExA
GetFileTime
ReadFile
GetFileSize
GetComputerNameA
GetFileSize
CopyFileA
CreateThread
ReadFile
CreateProcessA
DeleteFileA
GetStdHandle
OpenFile
ReadConsoleA
CopyFileExW
user32
LoadMenuA
DrawIconEx
DialogBoxParamA
DrawTextA
GetWindowTextLengthA
CopyImage
DrawTextW
LoadCursorA
AlignRects
CalcMenuBar
EndDialog
InsertMenuA
CloseWindow
DialogBoxParamW
LoadCursorA
CopyRect
DrawIcon
BlockInput
CalcMenuBar
AppendMenuW
GetWindowTextLengthA
GetFocus
DrawTextA
CopyImage
LoadMenuA
DrawTextW
DrawIconEx
GetDlgItem
AlignRects
GetDC
CloseWindow
DialogBoxParamW
AppendMenuW
DrawTextW
CalcMenuBar
DrawIconEx
BlockInput
AppendMenuA
IsWindow
comctl32
ImageList_DrawIndirect
ImageList_GetImageCount
InitCommonControls
ImageList_LoadImage
ImageList_GetIconSize
ImageList_DragMove
ImageList_LoadImageA
ImageList_EndDrag
ImageList_Read
ImageList_Replace
ImageList_AddMasked
ImageList_GetIcon
ImageList_DragShowNolock
ImageList_Destroy
ImageList_AddIcon
ImageList_GetImageRect
ImageList_LoadImage
ImageList_LoadImageA
ImageList_EndDrag
ImageList_DragShowNolock
ImageList_DragLeave
ImageList_ReplaceIcon
ImageList_Replace
ImageList_Read
ImageList_GetImageInfo
ImageList_AddIcon
ImageList_GetDragImage
ImageList_AddMasked
ImageList_GetImageCount
ImageList_Remove
ImageList_Merge
ImageList_LoadImageW
ImageList_DrawEx
ImageList_GetIcon
ImageList_GetDragImage
ImageList_DrawIndirect
ImageList_Read
ImageList_Merge
ImageList_BeginDrag
ImageList_LoadImageA
ImageList_Copy
ImageList_AddMasked
ImageList_DragLeave
ImageList_GetImageRect
ImageList_Create
ImageList_Draw
ImageList_GetImageInfo
ImageList_DragMove
ImageList_LoadImage
ImageList_Replace
gdi32
AddFontResourceA
AddFontResourceW
AddFontResourceExW
AbortPath
GetBitmapBits
CloseFigure
ClearBitmapAttributes
GetPixel
ClearBrushAttributes
GetBrushOrgEx
GetPixel
SetTextColor
CloseMetaFile
BeginPath
CreateSolidBrush
RestoreDC
ExtTextOutA
AddFontResourceExA
GetDCOrgEx
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ