Static task
static1
Behavioral task
behavioral1
Sample
3fb67f9b4129841ee9c935f5038e9dd1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3fb67f9b4129841ee9c935f5038e9dd1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3fb67f9b4129841ee9c935f5038e9dd1_JaffaCakes118
-
Size
352KB
-
MD5
3fb67f9b4129841ee9c935f5038e9dd1
-
SHA1
3b855326689f6fda41600276a76d66ed38ad983e
-
SHA256
68122ebb39c0fb29e66fe137d0f551c4691e3f541989853ea96f827f6a142cdf
-
SHA512
0710d64b4c7003945212b450bc430ee73bb3fceabf89ea9129e8d80ad884856725fa605c51d71f2283c661d4359874a7b0a3b75973e7b5c0ea2d4f2344160120
-
SSDEEP
6144:dma0zANEa8Li1bWlWjkoCtfwR+RwBT4M9NdX753uSUQ1sab3n92aMK:d/08N5qAWgko8wR54aN7mwsSkal
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fb67f9b4129841ee9c935f5038e9dd1_JaffaCakes118
Files
-
3fb67f9b4129841ee9c935f5038e9dd1_JaffaCakes118.exe windows:4 windows x86 arch:x86
e6da116c84f3e1ea4d606c02323493f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
lstrlenA
LocalFree
GetLastError
GetConsoleTitleW
LoadLibraryExW
VirtualProtectEx
LocalFlags
OpenMutexA
GetACP
FreeConsole
CloseHandle
FindClose
GlobalLock
OpenMutexA
GetStdHandle
IsBadReadPtr
CreateEventA
GetModuleHandleA
GlobalUnlock
user32
DialogBoxParamA
GetParent
GetDlgItemTextA
CreateWindowExA
GetKeyState
IsMenu
GetMessageA
LoadCursorA
EndDialog
GetMessageA
ClipCursor
GetSubMenu
IsIconic
MessageBoxA
uxtheme
DrawThemeText
EnableTheming
DrawThemeBackground
CloseThemeData
GetCurrentThemeName
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ