Static task
static1
Behavioral task
behavioral1
Sample
3c60e4c7a7e1f4c46a1cc2a89e2224cf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c60e4c7a7e1f4c46a1cc2a89e2224cf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c60e4c7a7e1f4c46a1cc2a89e2224cf_JaffaCakes118
-
Size
301KB
-
MD5
3c60e4c7a7e1f4c46a1cc2a89e2224cf
-
SHA1
85cc792305b14c7e714f654eb3f3d6855b64d277
-
SHA256
979b4511e0ed871516d1bb4f89a68eecfc269bbb71b03bedf135befddc295ad6
-
SHA512
506801e953a86fd74015d62eca88f035cb80ea969d1d025432656a1043033b779e5e5514140a57a759991b657e1a9a14801ff923ee29e82ab8dfeff4deea6974
-
SSDEEP
3072:zZuKls7WoVofY4qet14ZsmB/KVnhKmBREg3kpPxMLvIFb/V2AYL9UDbvYX:zZuwoQq8ysmBSVgmBREg4yLvITY+Xv2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c60e4c7a7e1f4c46a1cc2a89e2224cf_JaffaCakes118
Files
-
3c60e4c7a7e1f4c46a1cc2a89e2224cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
416f2c9b8a6969dbccfde246961f1145
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
memcmp
wcsncpy
swscanf
memcpy
_except_handler3
wcstok
wcscpy
malloc
free
strlen
_wtoi
iswdigit
wcsncmp
wcslen
swprintf
vswprintf
wcsrchr
wcsstr
memmove
_wcsicmp
wcscmp
_wcslwr
wcschr
__CxxFrameHandler
_vsnwprintf
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
_controlfp
kernel32
GetStartupInfoA
GetModuleHandleA
CompareStringW
GetCurrentProcess
SetPriorityClass
GlobalAlloc
GlobalLock
GlobalFree
GetVersionExW
GetTempPathW
lstrcpyW
lstrcatW
FindFirstFileW
CreateFileW
GetFileInformationByHandle
CloseHandle
FindNextFileW
FindClose
GlobalDeleteAtom
FreeLibrary
LoadLibraryW
GlobalAddAtomW
GlobalFindAtomW
MulDiv
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileStringW
GetPrivateProfileStringA
WritePrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameW
CreateDirectoryW
GetFileAttributesW
GetUserDefaultLangID
GetProcAddress
SetLastError
DeleteFileW
user32
DrawTextW
GetSysColor
EndPaint
ScreenToClient
BeginPaint
SetWindowLongW
PtInRect
GetClientRect
KillTimer
InvalidateRect
GetWindowLongW
wsprintfW
RemovePropW
DialogBoxIndirectParamW
SetDlgItemTextW
GetDC
SetFocus
RegisterWindowMessageW
OffsetRect
CopyRect
GetSystemMetrics
ClientToScreen
MoveWindow
EndDialog
SetWindowTextW
SendMessageW
GetDlgItem
EnableWindow
ShowWindow
GetParent
GetWindowRect
SystemParametersInfoW
SetWindowPos
SendDlgItemMessageW
FindWindowW
ReleaseDC
CreateWindowExW
LoadStringW
PostMessageW
LoadIconW
SetTimer
GetPropW
SetPropW
gdi32
BitBlt
SetBkColor
ExtTextOutW
SetBkMode
SetTextColor
SelectObject
CreateCompatibleBitmap
CreateFontW
DeleteObject
DeleteDC
CreateCompatibleDC
GetTextExtentPoint32W
GetTextMetricsW
advapi32
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegCloseKey
RegCreateKeyW
RegSetValueExA
RegOpenKeyExW
RegQueryValueExW
shell32
ShellExecuteW
SHChangeNotify
ole32
CLSIDFromString
CoGetObject
CoInitialize
CoUninitialize
StringFromGUID2
CoCreateInstance
oleaut32
SysFreeString
SysAllocStringLen
SysStringLen
SysAllocString
comctl32
PropertySheetW
Sections
.text Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 152KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE