Static task
static1
Behavioral task
behavioral1
Sample
3df65370bd922a79d62d47ba372b50ba_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3df65370bd922a79d62d47ba372b50ba_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3df65370bd922a79d62d47ba372b50ba_JaffaCakes118
-
Size
144KB
-
MD5
3df65370bd922a79d62d47ba372b50ba
-
SHA1
f9c939c315e326250cbc9d789c2cca12bad75e4f
-
SHA256
3f05e93bd4c10d9c4e3cf8d7509510f4480807585441a35d1608bf180e674280
-
SHA512
ff4ba1274d4d188524c1c96beafb3044f5935124157a78c62c297d274bdfc83cb858c39fec46a647fc0f6318da87b82c823792ec26af0b006a38ace33a3404f9
-
SSDEEP
3072:EgfRsdaoJ1iaDDBmJDqR5OUfau2vBug73f7rBsXSZ:ET0aD4qR5OGaudg3rai
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3df65370bd922a79d62d47ba372b50ba_JaffaCakes118
Files
-
3df65370bd922a79d62d47ba372b50ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
e6179468e7af898ce8d9a4228b34836b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
lstrcmpiW
GetSystemTime
GetSystemPowerStatus
lstrcatW
lstrcpyW
lstrcpynW
GetDateFormatA
LoadLibraryA
GetStringTypeA
WideCharToMultiByte
LCMapStringA
ReadFile
SetEndOfFile
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
CreateFileW
SetFilePointer
FlushFileBuffers
SetStdHandle
GetFileType
lstrlenA
LCMapStringW
MultiByteToWideChar
HeapAlloc
RtlUnwind
HeapReAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetLastError
CloseHandle
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeW
user32
GetSysColor
GetSystemMetrics
GetDesktopWindow
GetWindowDC
ReleaseDC
CreateCaret
ShowCaret
BeginDeferWindowPos
SystemParametersInfoA
CopyRect
GetWindowRect
GetFocus
SetFocus
gdi32
GetTextMetricsA
SetMapMode
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ