Static task
static1
Behavioral task
behavioral1
Sample
3e9334b34f7264ede9b4fbeb800afd21_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e9334b34f7264ede9b4fbeb800afd21_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e9334b34f7264ede9b4fbeb800afd21_JaffaCakes118
-
Size
76KB
-
MD5
3e9334b34f7264ede9b4fbeb800afd21
-
SHA1
712bea482fa7e7417a259bcc76403a1fe2acb00f
-
SHA256
c844c8050275c7c7289187d2df8653c04615538b83ef0dc95432dbbcc5129440
-
SHA512
7bde11cb06af7c5b376c00253fc03d287a3c56694a1abf4a29c63e1140c1921c41e625be0625592977bf082b1802d09e2301ecb55358392f6cc968ae4c7a553a
-
SSDEEP
1536:K3dvpmd/dAB8XQaUZMnbsBc4zb0frhnTG31g:Kd4hdqzaUIbsu4erhnTG31g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e9334b34f7264ede9b4fbeb800afd21_JaffaCakes118
Files
-
3e9334b34f7264ede9b4fbeb800afd21_JaffaCakes118.exe windows:4 windows x86 arch:x86
582852802c9be9ed837df166a486f819
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
SetTimeZoneInformation
SetConsoleLocalEUDC
IsDBCSLeadByte
CreateJobObjectA
GetFirmwareEnvironmentVariableW
EnumDateFormatsExW
GetOEMCP
GetLogicalProcessorInformation
QueueUserAPC
EnumSystemLanguageGroupsW
DeleteCriticalSection
BuildCommDCBW
IsValidLanguageGroup
GetEnvironmentStringsW
InterlockedPopEntrySList
HeapDestroy
ResetEvent
GetDriveTypeA
GetConsoleCommandHistoryA
RemoveDirectoryW
DebugActiveProcessStop
RegisterWaitForSingleObjectEx
InterlockedPushEntrySList
DefineDosDeviceW
SuspendThread
GetProcAddress
ReadDirectoryChangesW
GetConsoleTitleW
BackupSeek
GetTempPathW
RequestWakeupLatency
GetProcAddress
GetLastError
ExpandEnvironmentStringsW
LoadLibraryA
EnumCalendarInfoA
GetACP
GetPrivateProfileSectionA
QueryMemoryResourceNotification
EnumResourceLanguagesW
EndUpdateResourceA
DeleteTimerQueueEx
lstrcmpiA
HeapDestroy
SetConsoleTitleW
FillConsoleOutputAttribute
GetPrivateProfileSectionA
SetConsoleInputExeNameW
GetFileAttributesW
Module32FirstW
ClearCommBreak
HeapFree
ConsoleMenuControl
CreateIoCompletionPort
LocalAlloc
MulDiv
FindVolumeClose
GetComputerNameA
GetNumberOfConsoleMouseButtons
GetCommProperties
IsDBCSLeadByte
SetThreadUILanguage
CreateDirectoryExW
GetUserDefaultUILanguage
MoveFileWithProgressW
SetConsoleCursorPosition
SetConsoleScreenBufferSize
EnumResourceLanguagesW
SetupComm
IsDebuggerPresent
GetOverlappedResult
CheckNameLegalDOS8Dot3W
GetDllDirectoryA
WriteConsoleInputVDMW
WriteProfileSectionW
GetDateFormatA
GetPrivateProfileIntA
GetProfileStringW
WriteConsoleOutputCharacterW
UnregisterConsoleIME
GetSystemDirectoryA
Module32First
WriteConsoleInputA
GetFullPathNameW
GenerateConsoleCtrlEvent
GetCPInfo
GetExitCodeProcess
GetConsoleProcessList
SetConsoleDisplayMode
EnumResourceLanguagesW
ReadConsoleInputA
GetShortPathNameA
SetConsoleNumberOfCommandsW
GetCPInfo
GetOEMCP
SetConsoleCursorInfo
EnumDateFormatsExW
ReadConsoleOutputCharacterW
TerminateThread
SetProcessWorkingSetSize
ExpungeConsoleCommandHistoryW
SetCommBreak
MapUserPhysicalPagesScatter
GetProfileStringW
GetSystemDefaultLCID
FreeResource
SetCommTimeouts
Toolhelp32ReadProcessMemory
DeleteTimerQueueTimer
WritePrivateProfileStringW
RemoveLocalAlternateComputerNameA
SetConsoleDisplayMode
GetPrivateProfileStringA
InterlockedFlushSList
ReleaseActCtx
LockResource
QueueUserWorkItem
OpenConsoleW
WaitNamedPipeA
SetDllDirectoryA
WritePrivateProfileStructA
EnumSystemLanguageGroupsA
EnumDateFormatsA
CopyFileExA
DeviceIoControl
Toolhelp32ReadProcessMemory
GetConsoleAliasesW
lstrcpynA
BuildCommDCBAndTimeoutsA
ResetWriteWatch
SizeofResource
SizeofResource
MulDiv
PeekConsoleInputW
SetConsoleCtrlHandler
GetNamedPipeInfo
ResetWriteWatch
SetConsoleFont
GetConsoleTitleA
OpenThread
CreateActCtxW
GetSystemRegistryQuota
HeapLock
GetCommandLineW
ReplaceFile
SetConsoleLocalEUDC
GetExitCodeProcess
GetProcessId
RestoreLastError
ResetEvent
CreateHardLinkA
UnregisterWait
lstrcpynW
GetConsoleInputExeNameW
GetUserDefaultLCID
WritePrivateProfileSectionA
ExitVDM
WTSGetActiveConsoleSessionId
GetLongPathNameA
InterlockedFlushSList
GetWriteWatch
UnregisterConsoleIME
FindVolumeMountPointClose
FreeLibrary
BackupRead
BuildCommDCBW
FindActCtxSectionStringA
DeleteFileA
QueryDosDeviceA
DebugBreakProcess
GetFileSize
lstrcmp
OpenJobObjectW
CreateMutexA
VirtualQueryEx
DeleteFiber
Sections
.text Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ
.itext Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE