Static task
static1
Behavioral task
behavioral1
Sample
3fe4a1f4b875e6bb2b395233cb0e601b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3fe4a1f4b875e6bb2b395233cb0e601b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3fe4a1f4b875e6bb2b395233cb0e601b_JaffaCakes118
-
Size
285KB
-
MD5
3fe4a1f4b875e6bb2b395233cb0e601b
-
SHA1
1c37847f1dc80c4af0137a5c6cf698ef4031cd2d
-
SHA256
2709cf8b1bbdd623a1052684812875838fd8fe6945c37e87c5dd546e7494671b
-
SHA512
88fbb85290331a8917b67999e3ec37d5bf850a330fda7b78ec262321db83be0d7a97650a77522e846f38b6037f0a21649c192d569d6159d4a97bc2eaf797fc37
-
SSDEEP
6144:dp8WTnJXHjpsBZQ5QkGc1nACyun8pms9x9E786bkXd6Xw:deWTnRHjpKZ8P1ACyunSms1BxXd6Xw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fe4a1f4b875e6bb2b395233cb0e601b_JaffaCakes118
Files
-
3fe4a1f4b875e6bb2b395233cb0e601b_JaffaCakes118.exe windows:4 windows x86 arch:x86
6ced826f1014dd3ea7fdeaa7909d2933
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetCurrentThread
GetSystemTime
InterlockedDecrement
LoadLibraryW
GetTickCount
GetLocalTime
GetDriveTypeW
TerminateThread
CloseHandle
FindNextChangeNotification
GetUserDefaultLangID
CreateEventW
FileTimeToSystemTime
GetVersion
ResumeThread
MoveFileW
GlobalUnlock
GetProcAddress
lstrcpyW
lstrlenW
FindClose
GetFileSize
CreateThread
WriteFile
FindResourceW
GetModuleFileNameW
ExitProcess
GetProcessHeap
HeapAlloc
HeapFree
HeapSize
IsBadReadPtr
LoadLibraryA
VirtualFree
VirtualProtect
LoadResource
SetEndOfFile
GetCurrentProcessId
InterlockedIncrement
WritePrivateProfileStringW
FindFirstChangeNotificationW
CancelWaitableTimer
GlobalLock
SizeofResource
QueryDosDeviceW
FindResourceExW
GlobalAddAtomW
GetCurrentThreadId
CreateFileW
LockResource
WaitForSingleObject
ResetEvent
GetFileAttributesW
VirtualAlloc
GetPrivateProfileStringW
GetFileAttributesExW
FreeLibrary
MulDiv
user32
GetWindowDC
GetClassNameW
SetWindowPos
DestroyIcon
DestroyMenu
PostThreadMessageW
CreateWindowExW
InvalidateRect
LoadBitmapW
MessageBoxW
GetDlgItem
TrackPopupMenu
DispatchMessageW
ReleaseDC
RegisterClassExW
SetForegroundWindow
GetWindowThreadProcessId
SendMessageW
GetSystemMetrics
AppendMenuW
GetSysColor
RegisterWindowMessageW
GetCursorPos
FillRect
wsprintfW
SendDlgItemMessageW
EnableWindow
SetCapture
LoadIconW
OffsetRect
DialogBoxParamW
SetWindowTextW
IsDlgButtonChecked
SetCursorPos
ReleaseCapture
GetWindowRect
CreatePopupMenu
LoadStringW
UpdateWindow
RedrawWindow
DefWindowProcW
DrawTextW
LoadCursorW
IsWindow
RegisterHotKey
gdi32
SelectObject
SetBkColor
LineTo
BitBlt
CreatePen
DeleteObject
GetClipBox
SetMapMode
GetStockObject
StretchBlt
SetTextColor
SetBkMode
GetObjectW
CreateCompatibleBitmap
CreateDCW
DPtoLP
CreateBitmap
advapi32
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
shell32
Shell_NotifyIconW
ole32
CoInitialize
CoUninitialize
CoInitializeEx
CreateStreamOnHGlobal
Sections
.text Size: 248KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE