Static task
static1
Behavioral task
behavioral1
Sample
3dc83839f3b9e026bd1104b2e8de9aba_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3dc83839f3b9e026bd1104b2e8de9aba_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3dc83839f3b9e026bd1104b2e8de9aba_JaffaCakes118
-
Size
43KB
-
MD5
3dc83839f3b9e026bd1104b2e8de9aba
-
SHA1
5a22397fe9a1e850539a0aaa474332544aa3e8e9
-
SHA256
38ffcceeea330bf3ae258e9d8dc2b3b94372ff5063a306ca40ab1ffa973b3dc3
-
SHA512
07afb17ab0e3d9196ec76b961e0488eed332687ca42c487c857ee3061aadc6ed73111ef011751e7f25279c28e4d829d75bd3dfd5a1041e1a782b002ae9182563
-
SSDEEP
768:qZkvfFFP2Fy1zp4P7oKSlQ3B3zJEhWQbN8mOnwrvL+iQFPd0o2:qZkVFP11l4P7JzR3zJEhW+9QFF0o2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dc83839f3b9e026bd1104b2e8de9aba_JaffaCakes118
Files
-
3dc83839f3b9e026bd1104b2e8de9aba_JaffaCakes118.exe windows:5 windows x86 arch:x86
0ab144ed6ac8d0409257fff12389e6d7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
EnterCriticalSection
FindClose
HeapFree
GetUserDefaultUILanguage
GetModuleHandleA
HeapAlloc
FindFirstFileW
WriteFile
GetCurrentThread
lstrcpynW
CreateEventW
CreateThread
GlobalLock
CreateProcessW
GetSystemTime
lstrcatW
FlushFileBuffers
MultiByteToWideChar
CreateFileMappingW
lstrcmpiA
lstrlenA
CreateMutexW
GetTimeZoneInformation
CloseHandle
GetDriveTypeW
GetCommandLineA
ReleaseMutex
ExpandEnvironmentStringsW
GetTempPathW
user32
GetWindowLongW
Sections
.dorel Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fclml Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fmbwh Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
stalin Size: 60B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ