Static task
static1
Behavioral task
behavioral1
Sample
3fbf8d1661fffd4608a2f59cb4b3f50a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3fbf8d1661fffd4608a2f59cb4b3f50a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3fbf8d1661fffd4608a2f59cb4b3f50a_JaffaCakes118
-
Size
23KB
-
MD5
3fbf8d1661fffd4608a2f59cb4b3f50a
-
SHA1
619092793500eff8098aa78f3fb66392c735e20e
-
SHA256
16cbce5e4e24475af579275e98d00c94b1c4be34d9ca1041add7848fcbf203fe
-
SHA512
7ea095d681354664cd14dfeee35d2f1a631353d98873a04d0b5a73d0904a9dd1f54c33387475612a17d8e804c1e17dccddcff0762df5e0a8e2894620d685d5a5
-
SSDEEP
384:o9/kCeyQDZTSEsKua9asTI8wFB0M0Ro551Fa+wmG9C41fKV5uadl5klzIyeqgbuH:w8Cev39ua9asEfB0M0Ro55fomGw6fKep
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fbf8d1661fffd4608a2f59cb4b3f50a_JaffaCakes118
Files
-
3fbf8d1661fffd4608a2f59cb4b3f50a_JaffaCakes118.exe windows:1 windows x86 arch:x86
60d8743856781f22733f8809e83046cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
ExpandEnvironmentStringsA
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetExitCodeThread
GetFileAttributesA
GetFileSize
GetFullPathNameA
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemDefaultLCID
GetSystemDefaultLangID
GetSystemDirectoryA
GetSystemInfo
GetSystemTime
CloseHandle
GetTempPathA
GetVersionExA
LoadLibraryA
CopyFileA
LocalAlloc
LocalFree
ReadFile
CreateEventA
RtlUnwind
RtlZeroMemory
CreateFileA
SetFilePointer
Sleep
UnmapViewOfFile
VerLanguageNameA
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WinExec
WriteFile
lstrcatA
lstrcpyA
lstrlenA
CreateProcessA
CreateSemaphoreA
CreateThread
user32
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
DefWindowProcA
advapi32
LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
RegCreateKeyA
RegCloseKey
RegFlushKey
RegOpenKeyA
RegOpenKeyExA
RegSetValueExA
crtdll
__GetMainArgs
_sleep
_splitpath
_stricmp
exit
raise
signal
strchr
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE