Static task
static1
Behavioral task
behavioral1
Sample
3fe158878e3552996efef03d9ea7c636_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3fe158878e3552996efef03d9ea7c636_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3fe158878e3552996efef03d9ea7c636_JaffaCakes118
-
Size
338KB
-
MD5
3fe158878e3552996efef03d9ea7c636
-
SHA1
e9942e4e496dae02113351f085195e1e0b301ab2
-
SHA256
18f7509ba692fc46a61effa84e8e57eda0f68620afeec8506c76a03ad0b5ee32
-
SHA512
131e917daa8579ff28cd93db7c0260e404aa9a0e156c1305237104dab85f38705a7e63e58cd5caea4536794a05fd1fa70c1c69babefa7ae4de22d035d3c58cc6
-
SSDEEP
6144:a/LAAAiiQ79E0dJmSVTKQ9+F0ttshNIT3n1pV4aSrxb8UKxPVlByUD:aLAAAip5vnJVKQMF0tGHIT3n1p6a4hKN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fe158878e3552996efef03d9ea7c636_JaffaCakes118
Files
-
3fe158878e3552996efef03d9ea7c636_JaffaCakes118.exe windows:4 windows x86 arch:x86
e37e2c490ab72a18be276156c3973189
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
GetCurrentProcessId
VirtualProtect
HeapCreate
HeapQueryInformation
HeapDestroy
GetTapeStatus
GlobalMemoryStatus
InterlockedExchange
GetProcessVersion
IsDebuggerPresent
GetLogicalDrives
GetTimeFormatA
CreateIoCompletionPort
GetProcessHeap
GetCurrentThread
GetModuleHandleA
GetStdHandle
GetEnvironmentStringsA
WaitForSingleObject
GetACP
user32
GetFocus
GetParent
GetClassNameA
GetDlgItem
wsprintfA
FillRect
BeginPaint
DrawTextA
EndPaint
GetTitleBarInfo
GetCursorPos
DragDetect
SetActiveWindow
FrameRect
ReleaseDC
GetWindowTextLengthA
ShowWindow
SetForegroundWindow
GetWindow
advapi32
RegEnumKeyA
RegSetValueExA
RegCloseKey
RegCreateKeyA
RegFlushKey
setupapi
SetupCloseLog
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ