Static task
static1
Behavioral task
behavioral1
Sample
3d0bb3dc6276113f57399aea4ae0f954_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3d0bb3dc6276113f57399aea4ae0f954_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d0bb3dc6276113f57399aea4ae0f954_JaffaCakes118
-
Size
205KB
-
MD5
3d0bb3dc6276113f57399aea4ae0f954
-
SHA1
54faca62e0fb8f170bea966344807e7d623c443e
-
SHA256
ea5c4b9d058bff2ad0415c34d61ff2837c83ea435a017008c3e14806227e28cd
-
SHA512
63802c3536808374f620c867dd6bcd157a6793c73bc5b61dd06d57d5576ea024f188593a27ddc42f2b0ff64527d71ca61e596aa9b347235154a5dde4ffcbec67
-
SSDEEP
3072:e7PZs+YvwU4aGHkV65X7g/n5iZVjAa4R0gPerAma9wd+ema8zOKB:e7P6+YvwU69Y6jMug2rI9wgciOK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d0bb3dc6276113f57399aea4ae0f954_JaffaCakes118
Files
-
3d0bb3dc6276113f57399aea4ae0f954_JaffaCakes118.exe windows:4 windows x86 arch:x86
abd3204bd885688af1d7f14284ed8e22
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
setupapi
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
FreeLibrary
GetCurrentProcessId
InterlockedCompareExchange
InterlockedExchange
CreateFiberEx
TlsGetValue
GetModuleHandleW
GetCurrentProcess
FoldStringW
GetStartupInfoA
GetProcessHeap
UnhandledExceptionFilter
TerminateThread
CloseHandle
GetCurrentThreadId
IsDebuggerPresent
QueryPerformanceCounter
CreateSemaphoreW
GetLocaleInfoW
ReleaseSemaphore
EnumResourceNamesA
LoadLibraryA
TlsFree
TlsAlloc
SetUnhandledExceptionFilter
LocalAlloc
DeleteFileW
WaitForSingleObject
GetCommandLineW
FlushFileBuffers
GetLastError
GetProcAddress
LoadLibraryW
TerminateProcess
GetSystemTimeAsFileTime
GetTickCount
RaiseException
VirtualProtect
Sleep
GetModuleFileNameW
msimg32
AlphaBlend
user32
IsWindow
GetWindowPlacement
DestroyWindow
GetParent
IsIconic
GetSystemMetrics
SetWindowPlacement
LoadIconW
UpdateWindow
ShowWindow
LoadImageW
IsZoomed
RealGetWindowClass
MapVirtualKeyW
SetWindowPos
SetForegroundWindow
Sections
.text Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ