Static task
static1
Behavioral task
behavioral1
Sample
3eb9aca167f1e786b5cc1281e67f0b1a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3eb9aca167f1e786b5cc1281e67f0b1a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3eb9aca167f1e786b5cc1281e67f0b1a_JaffaCakes118
-
Size
328KB
-
MD5
3eb9aca167f1e786b5cc1281e67f0b1a
-
SHA1
5de93cc925083f26aa1c6206d60560927cdf5d17
-
SHA256
f77980f2fd020a8f094286322a1a04b193ef8889341a852c9a384ca872f24417
-
SHA512
be9f5ddc5a48ab18d076352501f85a236755900e67c41aac4dc5e25b5a436b25a134c32d1b46abd253c1091239d4b8059b4ac3999be92788d5ac3c5c8cf22c03
-
SSDEEP
6144:fK/Wr5DS4G8ouCZW0GEu4N6OVXpLRDhA9t5FHTdZQ69h0ODm6:x5DS4G8ouEW3EuHwhsFHMG1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3eb9aca167f1e786b5cc1281e67f0b1a_JaffaCakes118
Files
-
3eb9aca167f1e786b5cc1281e67f0b1a_JaffaCakes118.exe windows:4 windows x86 arch:x86
e304217fc16c011615a0ec22783cbfae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 232KB - Virtual size: 745KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 48KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE