Static task
static1
Behavioral task
behavioral1
Sample
3fb99092434cc14a2a6a9abe1afff935_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3fb99092434cc14a2a6a9abe1afff935_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3fb99092434cc14a2a6a9abe1afff935_JaffaCakes118
-
Size
367KB
-
MD5
3fb99092434cc14a2a6a9abe1afff935
-
SHA1
540ed7a332086b93dfeee4a97ad7110bc08846bb
-
SHA256
bdd3a9d88699ed16f21022b3fdcc23561a9af62477501af82f4421656b85c517
-
SHA512
4fff281eeea0974853f4a943b29480d48073291ec23bd4709fb29db8916dfbc5e9bd4209cb6c86f6f1e53c429514c978371a0a0a51ea7d4cca9202ef91016b85
-
SSDEEP
6144:HRM7hrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:HRM9rpDneFNzino7IUHybPzQjUeX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fb99092434cc14a2a6a9abe1afff935_JaffaCakes118
Files
-
3fb99092434cc14a2a6a9abe1afff935_JaffaCakes118.exe windows:4 windows x86 arch:x86
26ba82fa8b0aeb2526ed30cb9da27fa7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasW
GetCurrentThreadId
GetDriveTypeW
lstrlenW
GetPrivateProfileStringW
EnumCalendarInfoW
GetCurrentProcessId
ReadFile
FindClose
EnterCriticalSection
FindAtomW
SetEvent
SetLastError
GetModuleFileNameA
HeapCreate
GetNumberFormatW
TlsGetValue
LocalFree
ResumeThread
GetModuleHandleA
user32
GetCursorInfo
DispatchMessageA
DispatchMessageA
GetSysColor
IsWindow
GetKeyState
DrawTextW
GetClientRect
GetKeyboardType
GetMenuInfo
CallWindowProcW
GetClassInfoA
SetFocus
wsnmp32
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 357KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ