Static task
static1
Behavioral task
behavioral1
Sample
3f8a1ebd24b8d5f1cbbae213d7aa11ee_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f8a1ebd24b8d5f1cbbae213d7aa11ee_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f8a1ebd24b8d5f1cbbae213d7aa11ee_JaffaCakes118
-
Size
506KB
-
MD5
3f8a1ebd24b8d5f1cbbae213d7aa11ee
-
SHA1
6ecd40e67cb473cb8b963de1360116eb02baf572
-
SHA256
a7bebe43f15ee058dcf2922664f54705624bcaf2ff0c078050bec27465d5d550
-
SHA512
5c0122621a287a9d0d3ac24d2a0a4726d2e9da96ac1e78889b47e4140fa169e50405edebaff1701693bbbc0e52bd5883cf30ed1499e2de4edd20ef853d9c7de4
-
SSDEEP
12288:hQbN/m+eQAx3pC3EjVTSMs1GDAT+dYHx6wZurd14JVf:iB/m+eQp3EjNBs1oOR6S4qJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f8a1ebd24b8d5f1cbbae213d7aa11ee_JaffaCakes118
Files
-
3f8a1ebd24b8d5f1cbbae213d7aa11ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
dc83e8f140e0501162eb184af6bac661
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
user32
GetMenuDefaultItem
InvalidateRect
CloseWindow
SetFocus
SetDebugErrorLevel
RegisterClassA
CloseDesktop
CopyAcceleratorTableA
RegisterClassExA
GetWindowInfo
EnumDisplayMonitors
LoadMenuIndirectW
CreateIconFromResourceEx
DragObject
GetWindowDC
GetWindowLongW
ExcludeUpdateRgn
TranslateMessage
LookupIconIdFromDirectory
shell32
FreeIconList
SHLoadInProc
CheckEscapesW
SHGetDataFromIDListA
advapi32
RegQueryInfoKeyA
ReportEventW
LookupPrivilegeValueW
RegOpenKeyA
RegOpenKeyW
CryptSetKeyParam
CryptEncrypt
LookupAccountNameA
RegCreateKeyExW
LogonUserW
RegDeleteKeyA
LookupPrivilegeNameA
CryptGenKey
RegDeleteKeyW
RegEnumKeyExW
RegSaveKeyA
RegQueryValueExA
comdlg32
ReplaceTextA
ChooseFontA
kernel32
InterlockedIncrement
UnhandledExceptionFilter
GetOEMCP
InterlockedDecrement
TlsAlloc
GetLocaleInfoW
SetLastError
GetConsoleMode
SetStdHandle
GetTimeFormatA
GetCommandLineA
GetEnvironmentStringsW
GlobalCompact
GetStartupInfoW
EnterCriticalSection
RtlUnwind
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
IsValidCodePage
GetTickCount
GetLocaleInfoA
LeaveCriticalSection
GetModuleHandleW
SetConsoleCursorInfo
GetLastError
OpenMutexA
GetFileType
ExitProcess
CompareStringW
GetStdHandle
SetConsoleCtrlHandler
GetProcAddress
HeapAlloc
FindResourceExW
HeapSize
FreeEnvironmentStringsW
HeapCreate
GetUserDefaultLCID
SetEnvironmentVariableA
GetPrivateProfileSectionA
SetUnhandledExceptionFilter
GetModuleFileNameA
GetDateFormatA
SetHandleCount
GetSystemTimeAsFileTime
GetCommandLineW
GetModuleHandleA
GetConsoleOutputCP
AddAtomA
CompareStringA
LCMapStringA
GetStringTypeW
GetCurrentThreadId
WriteConsoleA
HeapDestroy
GetCurrentThread
GetStartupInfoA
WideCharToMultiByte
TlsGetValue
TlsSetValue
WriteFile
EnumSystemLocalesA
HeapFree
HeapReAlloc
FlushFileBuffers
VirtualQuery
CreateFileA
GetConsoleCP
FreeLibrary
InterlockedExchange
GetCPInfo
SetFilePointer
GetACP
GetModuleFileNameW
LCMapStringW
CreateMutexA
IsDebuggerPresent
GetStringTypeA
GetTimeZoneInformation
GetCurrentProcessId
Sleep
GetVersionExA
VirtualAlloc
TerminateProcess
TlsFree
DeleteCriticalSection
VirtualFree
ReadFile
WriteConsoleW
IsValidLocale
GetCurrentProcess
LoadLibraryA
CloseHandle
QueryPerformanceCounter
Sections
.text Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 314KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ