_z
Static task
static1
Behavioral task
behavioral1
Sample
3d45be8e896a8df55bf4f1c2c14a1034_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d45be8e896a8df55bf4f1c2c14a1034_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d45be8e896a8df55bf4f1c2c14a1034_JaffaCakes118
-
Size
168KB
-
MD5
3d45be8e896a8df55bf4f1c2c14a1034
-
SHA1
b4daac40b2da5e5d06a26573362d56d1044fd24c
-
SHA256
7010d5941285b3bcbcea519483d860b6027be32cfcc31e628b3f31f3ba77e3b0
-
SHA512
0a97a2ce00da0ee55504f97654fa3917a1277927da14bbe9d8e33f1c237f50b44cc4a6aacc3c34dc4a698fb2ded66b9b8c4785b42c5d651d4483a7ba6263e66c
-
SSDEEP
3072:fXSzyAR1VcfvOYIM26oBX7k5/EhkMMxeZw66XZ0uJJx4YQwr7IJ:fCzjQvOYFSccNZw2uJH4zwr7M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d45be8e896a8df55bf4f1c2c14a1034_JaffaCakes118
Files
-
3d45be8e896a8df55bf4f1c2c14a1034_JaffaCakes118.exe windows:4 windows x86 arch:x86
ad3be2e5b8e97be965905f5dd10112e2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcmpiA
GetCommandLineA
lstrlenA
ExitProcess
lstrcmpA
VirtualAllocEx
user32
MessageBeep
GetMenu
GetSysColorBrush
MapWindowPoints
GetParent
MessageBoxA
IsZoomed
wsprintfA
GetCursor
GetCapture
CreateMenu
gdi32
SetPixel
CreateDIBitmap
GetTextAlign
GetPixel
SaveDC
GetBkMode
CreateCompatibleDC
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 195KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bbs Size: 512B - Virtual size: 299B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edata Size: 1024B - Virtual size: 953B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 942B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 1024B - Virtual size: 657B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ