Static task
static1
Behavioral task
behavioral1
Sample
3e575475fa5ce663d577798b14ec1eaf_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e575475fa5ce663d577798b14ec1eaf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e575475fa5ce663d577798b14ec1eaf_JaffaCakes118
-
Size
88KB
-
MD5
3e575475fa5ce663d577798b14ec1eaf
-
SHA1
24af1b884007d71d56bf225971b444e695aa7ec0
-
SHA256
3ebcbcfc0dec108751132f666fb39fc4a78107053a73d23a761a3bee1eb636cf
-
SHA512
5cb13eb2885e46f1874a7810db31b088840eb435ff0d5db057ddc7993e48e569bc405118314884bd235eda77c73b67bb9b6416610a8869995553ac58034cbf8a
-
SSDEEP
1536:TrajuiRPy4po+qHbii0Ghrz7BP4O+umnzJLgZoXwxnCU7MX:TraCiRPy4JqH15f7BP4O+5nzuo+n6X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e575475fa5ce663d577798b14ec1eaf_JaffaCakes118
Files
-
3e575475fa5ce663d577798b14ec1eaf_JaffaCakes118.exe windows:4 windows x86 arch:x86
83e0944dde02996b4fa28726519f0bac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseColorW
ChooseFontW
CommDlgExtendedError
FindTextA
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
PrintDlgExA
PrintDlgW
dwLBSubclass
dwOKSubclass
user32
GetScrollInfo
GetSubMenu
GetUserObjectSecurity
GetWindowRect
LoadAcceleratorsA
MoveWindow
RemoveMenu
SendMessageTimeoutA
SetClassLongA
SetPropA
SetTimer
SetWindowLongA
kernel32
GetUserDefaultLangID
GetStartupInfoA
GetOEMCP
GetModuleHandleA
GetLogicalDrives
GetComputerNameA
GetCommandLineA
GetACP
FindResourceExW
FindFirstChangeNotificationA
FatalAppExitW
ExitProcess
EnumSystemLanguageGroupsA
lstrcmpiW
WritePrivateProfileStructA
WaitNamedPipeW
VirtualProtect
TerminateJobObject
RtlFillMemory
PulseEvent
OpenMutexA
HeapCreate
HeapAlloc
GlobalUnfix
GetVersionExA
CloseHandle
EnumResourceNamesW
GetUserDefaultLCID
ole32
CoCreateInstance
dbghelp
SymMatchFileName
FindFileInPath
GetTimestampForLoadedLibrary
MiniDumpReadDumpStream
MiniDumpWriteDump
SymEnumSourceFiles
SymEnumerateSymbolsW
SymGetLinePrev
SymGetModuleInfoW64
SymGetSymPrev64
SymLoadModule64
comctl32
CreateUpDownControl
FlatSB_GetScrollProp
FlatSB_GetScrollRange
ImageList_DrawIndirect
ImageList_LoadImageA
ImageList_Read
ImageList_ReplaceIcon
ImageList_SetOverlayImage
InitCommonControlsEx
InitMUILanguage
InitializeFlatSB
CreateStatusWindowW
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ