Static task
static1
Behavioral task
behavioral1
Sample
3f6e44ac45f0dd1ff47b32adb2ce7ded_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3f6e44ac45f0dd1ff47b32adb2ce7ded_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f6e44ac45f0dd1ff47b32adb2ce7ded_JaffaCakes118
-
Size
2.2MB
-
MD5
3f6e44ac45f0dd1ff47b32adb2ce7ded
-
SHA1
77da754a86993c27e6cd5ccf870b53ea658c83f7
-
SHA256
37edf48a2a399e17ff1b9d363bea45acc3f9089271e89f8a0e458203dc5fb8c9
-
SHA512
e0f5402328de16841848832e2e7bb3b0eb68a69ae9e0e183a47b55083b6f351331738b27a5925dd17b4209ad435a4e5642077fc6a358e38adff7982ffb101236
-
SSDEEP
49152:Bv70qPJ0sZUTjYrrnMf9z7WhcszdckrC+td3PUndGkRmGUdBk4XsuTK8PdhFVyOs:Oc0swYnMfgNzlrCid3PUndNRWdBk4N55
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f6e44ac45f0dd1ff47b32adb2ce7ded_JaffaCakes118
Files
-
3f6e44ac45f0dd1ff47b32adb2ce7ded_JaffaCakes118.exe windows:4 windows x86 arch:x86
9807fb924f03a4b75c729f75db6bb696
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
GetShortPathNameA
SetFileTime
WriteFile
CreateFileA
LockResource
SizeofResource
LoadResource
FindResourceA
GlobalMemoryStatus
MultiByteToWideChar
DeleteFileA
GetPrivateProfileStringA
LoadLibraryA
GetProcAddress
CreateProcessA
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
WideCharToMultiByte
RtlUnwind
WaitForSingleObject
CloseHandle
CreateDirectoryA
WritePrivateProfileStringA
Sleep
GetOEMCP
WinExec
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
user32
MessageBoxA
DestroyWindow
LoadIconA
MessageBeep
ShowWindow
SetWindowTextA
EnableWindow
GetDlgItemTextA
SetDlgItemTextA
IsDlgButtonChecked
CheckDlgButton
PeekMessageA
DispatchMessageA
TranslateMessage
IsDialogMessageA
GetDlgItem
SendMessageA
UpdateWindow
CreateDialogParamA
LoadStringA
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegFlushKey
RegCloseKey
RegSetValueExA
shell32
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetPathFromIDListA
ole32
CoCreateInstance
CoInitialize
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ