Static task
static1
Behavioral task
behavioral1
Sample
3e33bd1f89244904fa7c4b7f02f6a6f4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e33bd1f89244904fa7c4b7f02f6a6f4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e33bd1f89244904fa7c4b7f02f6a6f4_JaffaCakes118
-
Size
129KB
-
MD5
3e33bd1f89244904fa7c4b7f02f6a6f4
-
SHA1
8ce57612e2bce4900a92a8f9ef745b36d38d9baf
-
SHA256
1a0df98489fa38ae39007c20257f6471b6ca287f1528b98a503c1158feb3152f
-
SHA512
d20e67b183651592b64f0a29a645e8c88798497eb2d282244ff899cf43600d2285696f3c7c1b7df5941bd23af59636c619c7e493dcdf9669dbe31459a793c16c
-
SSDEEP
1536:wMJB52+MokoCWwniPLl6Bh6ZyySRi2OPhHRUtr3CLZxmZ3uENF3kUTA/:N5kePIVySihHGtr3mPaugF3rTO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e33bd1f89244904fa7c4b7f02f6a6f4_JaffaCakes118
Files
-
3e33bd1f89244904fa7c4b7f02f6a6f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
daca055f3c647183f6d0b7627a1288fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord8
kernel32
LoadLibraryA
GetProcAddress
FreeLibrary
RemoveDirectoryA
GetFileAttributesA
SetFileAttributesA
lstrcmpiA
lstrlenA
MoveFileExA
GetShortPathNameA
GetWindowsDirectoryA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
GetCurrentProcess
GetLastError
GetModuleFileNameA
GetTickCount
IsDBCSLeadByte
OpenEventA
SetEvent
CloseHandle
OpenProcess
WaitForSingleObject
Sleep
VirtualProtect
WinExec
GlobalSize
CreateFileA
GlobalFree
WriteFile
GetCurrentProcessId
CopyFileA
CreateEventA
CreateProcessA
GetVersionExA
GetFileSize
GlobalAlloc
SetFilePointer
ReadFile
LocalAlloc
LocalFree
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEndOfFile
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
InitializeCriticalSection
GetSystemTimeAsFileTime
lstrcpyA
DeleteFileA
GetTempFileNameA
GetTempPathA
FindClose
FindNextFileA
lstrcmpA
FindFirstFileA
lstrcatA
lstrcpynA
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapAlloc
HeapFree
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
MultiByteToWideChar
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
user32
IsDialogMessageA
DestroyWindow
SetWindowPos
GetWindowLongA
AdjustWindowRect
MapDialogRect
SetRect
IsDlgButtonChecked
GetClientRect
PostQuitMessage
LoadStringA
DispatchMessageA
TranslateMessage
PeekMessageA
GetMessageA
SetDlgItemTextA
CharPrevA
ShowWindow
SendDlgItemMessageA
CreateDialogParamA
MessageBoxA
ExitWindowsEx
wsprintfA
GetDlgItem
SetWindowTextA
comdlg32
GetFileTitleA
advapi32
RegCloseKey
RegEnumKeyExA
RegCreateKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyExA
shell32
SHChangeNotify
SHGetPathFromIDListA
SHGetSpecialFolderLocation
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ