Static task
static1
Behavioral task
behavioral1
Sample
3eaa0df93cbd48c90d47ba413f134c56_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3eaa0df93cbd48c90d47ba413f134c56_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3eaa0df93cbd48c90d47ba413f134c56_JaffaCakes118
-
Size
400KB
-
MD5
3eaa0df93cbd48c90d47ba413f134c56
-
SHA1
21df20a8ae8f0710cb8c1f35e95766e872539a02
-
SHA256
e6f57cc879a35df3a759a927173a344238b97de33e138eec5dee8fc6768746a5
-
SHA512
eda9eb24cb4d3e2461d0eb1f09be2afc5334271df37f106271f379f9ab43c4c00fc062e6a9faabe9f8753ee98b1d94fdaca0c8f3c5a411b68b4889d11de7d8d2
-
SSDEEP
12288:PoJ//a83IMlWmUiuKVwKblOlGp5bkVzrW:P03IKuKVsoLkl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3eaa0df93cbd48c90d47ba413f134c56_JaffaCakes118
Files
-
3eaa0df93cbd48c90d47ba413f134c56_JaffaCakes118.exe windows:62061 windows x86 arch:x86
13b182cc18aae9de452b9ab43aff35ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetTickCount
GetTickCount
HeapFree
InterlockedIncrement
VirtualAlloc
lstrcmpiW
MultiByteToWideChar
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapDestroy
UnhandledExceptionFilter
HeapReAlloc
DeleteCriticalSection
EnterCriticalSection
EnterCriticalSection
VirtualAlloc
InterlockedDecrement
CreateFileW
QueryPerformanceCounter
GetModuleHandleA
FreeLibrary
LocalAlloc
GetStartupInfoW
CreateThread
HeapAlloc
GetCurrentProcessId
GetCommandLineW
user32
SetWindowTextW
SetRect
ReleaseDC
IsWindowVisible
GetKeyState
LoadStringW
GetSystemMenu
CreateDialogParamW
MessageBoxW
CopyRect
PostMessageW
TranslateMessage
GetDesktopWindow
EnableMenuItem
PtInRect
SetCapture
EnableMenuItem
LoadAcceleratorsW
EndPaint
GetWindow
LoadImageW
ShowWindow
ScreenToClient
RegisterClassExW
LoadStringW
DestroyMenu
SetDlgItemTextW
DestroyWindow
GetDlgCtrlID
LoadImageW
CheckDlgButton
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 388KB - Virtual size: 964KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ