Static task
static1
Behavioral task
behavioral1
Sample
3edae8a9ded081325c90754aa56d35fb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3edae8a9ded081325c90754aa56d35fb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3edae8a9ded081325c90754aa56d35fb_JaffaCakes118
-
Size
172KB
-
MD5
3edae8a9ded081325c90754aa56d35fb
-
SHA1
50c1477944aebc884a08a93371eac78d406fc2bf
-
SHA256
44000d0c900d369cb10c35a3856a09b44869253162749a10332203343c94645f
-
SHA512
19b0f77dbd8ccc4293c47fcd8ab99b231b959310d47bdb176f06414fbc2d46442eca1931b38fdbd60152280ba993e107f00dfe9aac40731b5a43ca5f0bd24394
-
SSDEEP
3072:MTJjKs8sqX3lt174Ek4ECkwan4BT6uxyH4N0ZswwGns+oXSqoWgcmCEOgFjf8M/e:MFKlnlt1gHCnjBT6hWUsOoXSqPgM9yjw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3edae8a9ded081325c90754aa56d35fb_JaffaCakes118
Files
-
3edae8a9ded081325c90754aa56d35fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
ab66b0097f2ee34a4890838d7f92fdd7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
GetModuleHandleW
GetLocalTime
GetVersion
GetCurrentProcess
TlsFree
AddAtomW
GetCommandLineA
SetUnhandledExceptionFilter
GlobalMemoryStatus
TlsAlloc
GetTickCount
GetModuleFileNameA
GetComputerNameA
SetHandleCount
TlsGetValue
GetCurrentThread
GetVersionExA
GetStdHandle
HeapFree
HeapAlloc
GetStartupInfoA
EnumResourceNamesA
DeviceIoControl
RtlUnwind
GetProcessHeap
OutputDebugStringW
SetLastError
CloseHandle
TerminateProcess
GetFileType
GetDiskFreeSpaceA
GetSystemTimeAsFileTime
TlsSetValue
GetCurrentProcessId
QueryPerformanceCounter
RaiseException
InterlockedExchange
msvcrt
_exit
_vsnwprintf
__p__commode
exit
__getmainargs
_ismbblead
_cexit
_initterm
__p__fmode
__set_app_type
_amsg_exit
?terminate@@YAXXZ
_vsnprintf
_acmdln
memset
_XcptFilter
__setusermatherr
_controlfp
Sections
.text Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ