F:\JKL\EUEK\CD
Static task
static1
Behavioral task
behavioral1
Sample
3e051c0056c61cfdc0cfa84625d5f5de_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e051c0056c61cfdc0cfa84625d5f5de_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e051c0056c61cfdc0cfa84625d5f5de_JaffaCakes118
-
Size
612KB
-
MD5
3e051c0056c61cfdc0cfa84625d5f5de
-
SHA1
ec025bd00f85e3cb7818d10ff2d7d32d13f6a79a
-
SHA256
9136d14fb5e491c620d66405646ed5b45304b4887fa00007ebbf0282dd745ac0
-
SHA512
520998f2f4cda340a42e0d78162e363afdba79c2abac438af53c8d1246cb4c2703cedbbf3d3de25fcaea4a7ad70d23aa2595bf843cc3ae2142c862e351194d86
-
SSDEEP
12288:EtpO/O4dZn5c5yHHFBq+XEpRsVK+lXC5z:ApO/O4dZ5cQHHFlEpv1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e051c0056c61cfdc0cfa84625d5f5de_JaffaCakes118
Files
-
3e051c0056c61cfdc0cfa84625d5f5de_JaffaCakes118.exe windows:4 windows x86 arch:x86
cba0f557ad1ef7b0a9cc097ab977bb0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
EnumTimeFormatsA
VirtualFree
GetCPInfo
DeleteCriticalSection
EnterCriticalSection
VirtualAlloc
SetConsoleCtrlHandler
HeapSize
IsValidCodePage
SetStdHandle
GetCurrentProcess
GetTimeFormatA
FillConsoleOutputAttribute
CreateFileA
GetEnvironmentStrings
GetOEMCP
MoveFileW
GetCommandLineA
GetCurrentThreadId
GetModuleFileNameA
GetProcessHeap
GetStringTypeA
GetVersionExA
InterlockedIncrement
GetCurrentThread
GetConsoleMode
HeapAlloc
LoadLibraryA
SetLastError
SetFilePointer
TlsFree
HeapReAlloc
HeapCreate
GetLastError
FreeEnvironmentStringsA
EnumSystemLocalesW
GetDateFormatA
GetUserDefaultLCID
GetSystemTimeAsFileTime
MultiByteToWideChar
IsDebuggerPresent
GetFileType
GetTimeZoneInformation
InterlockedDecrement
SetHandleCount
WriteFile
WriteConsoleA
GetPriorityClass
InterlockedExchange
GetDiskFreeSpaceExW
QueryPerformanceCounter
GetLocaleInfoA
SetUnhandledExceptionFilter
ExitProcess
GetLocaleInfoW
GetConsoleOutputCP
GetProcAddress
GetStdHandle
CompareStringA
IsValidLocale
SetEnvironmentVariableA
WriteConsoleW
HeapFree
InitializeCriticalSection
FindResourceW
CompareStringW
CreateFileW
GetStartupInfoA
WriteConsoleOutputCharacterW
TlsSetValue
TerminateProcess
CreateMutexA
WritePrivateProfileStringW
EnumSystemLocalesA
CloseHandle
WideCharToMultiByte
LCMapStringW
EnumResourceLanguagesA
Sleep
GetACP
LCMapStringA
GetConsoleCP
VirtualQuery
GetStringTypeW
TlsAlloc
TransactNamedPipe
FlushFileBuffers
TlsGetValue
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetThreadIdealProcessor
ReleaseSemaphore
OpenMutexA
CreateDirectoryA
ReadFile
UnhandledExceptionFilter
RtlUnwind
HeapDestroy
LeaveCriticalSection
FreeLibrary
GetModuleHandleA
GetCurrentProcessId
user32
DdeQueryConvInfo
CreateDesktopA
GetKeyboardLayoutNameA
AttachThreadInput
EndMenu
GetThreadDesktop
LoadIconW
DrawMenuBar
TranslateAcceleratorW
RegisterClassA
CreateWindowExA
LoadImageA
InSendMessage
SendNotifyMessageW
DestroyWindow
CharLowerW
GetParent
RegisterClassExA
ShowWindow
SetPropW
DefWindowProcA
MessageBoxW
FrameRect
SetDebugErrorLevel
GetWindow
SetRectEmpty
DrawCaption
FlashWindow
GetShellWindow
PackDDElParam
CreateCursor
SwapMouseButton
comctl32
ImageList_DragLeave
CreateStatusWindowA
CreateStatusWindow
ImageList_Remove
MakeDragList
ImageList_GetImageCount
ImageList_GetDragImage
ImageList_GetImageRect
ImageList_Destroy
InitCommonControlsEx
ImageList_Replace
ImageList_DragMove
ImageList_GetIcon
ImageList_AddIcon
ImageList_Read
ImageList_DrawEx
ImageList_LoadImage
ImageList_Merge
ImageList_ReplaceIcon
ImageList_AddMasked
Sections
.text Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 268KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ