Static task
static1
Behavioral task
behavioral1
Sample
3fe8afc3698fb5f880b49a62dbbc7a7d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3fe8afc3698fb5f880b49a62dbbc7a7d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3fe8afc3698fb5f880b49a62dbbc7a7d_JaffaCakes118
-
Size
108KB
-
MD5
3fe8afc3698fb5f880b49a62dbbc7a7d
-
SHA1
b87e6555235c4f0a7277e7bae172439dbb7ddccc
-
SHA256
28662a2546c9c1aea3d59c3fd97539ba4c37d247d8bdb3afffb7b73bef4a4756
-
SHA512
52cfbfe14533deaf62544edd53d03451ead0c047d3f07a0134434e8bc7162cbdc68355860ddb2220fa0a0e10e1c4511a8a8a3fb81c4bf262cfde48d03ca3d369
-
SSDEEP
3072:4pAXN+t1l3SYc469sjNx+HUWa9pKWD3jp+:4aXNjYcXsjH+HkvKu3jI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fe8afc3698fb5f880b49a62dbbc7a7d_JaffaCakes118
Files
-
3fe8afc3698fb5f880b49a62dbbc7a7d_JaffaCakes118.exe windows:5 windows x86 arch:x86
ad492f9aefb146afe6888d16ee815063
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
fseek
strlen
fopen
printf
malloc
fclose
fflush
__p__fmode
_except_handler3
free
exit
_acmdln
fwrite
fprintf
_cexit
remove
memmove
_XcptFilter
__p__commode
_initterm
strcmp
__setusermatherr
fread
__set_app_type
strcpy
_exit
__getmainargs
_iob
strstr
_onexit
_setmode
_adjust_fdiv
kernel32
GetEnvironmentStringsW
DuplicateHandle
GetTimeZoneInformation
SystemTimeToFileTime
LoadLibraryA
UnhandledExceptionFilter
GetProcAddress
SetFilePointer
SetStdHandle
IsDebuggerPresent
RtlUnwind
LCMapStringW
SetLastError
lstrcpynA
GetModuleHandleW
SetEnvironmentVariableA
GetOEMCP
ole32
OleUninitialize
CoGetInterfaceAndReleaseStream
CoInitializeSecurity
OleDraw
CoRevokeClassObject
CoCreateGuid
RevokeDragDrop
comctl32
ImageList_SetIconSize
ImageList_GetBkColor
ImageList_DragLeave
ImageList_SetDragCursorImage
ImageList_LoadImageW
ImageList_LoadImageA
ImageList_Create
ImageList_SetBkColor
shell32
ExtractIconW
ShellExecuteW
SHGetDiskFreeSpaceExW
SHGetPathFromIDListA
SHFileOperationW
SHBrowseForFolder
SHGetPathFromIDList
DragQueryFile
SHGetSettings
SHGetFolderPathW
ExtractIconA
DragAcceptFiles
SHBrowseForFolderW
gdi32
GetBkColor
CreatePalette
GetEnhMetaFileDescriptionA
DeleteEnhMetaFile
ExtFloodFill
SetPolyFillMode
CreateCompatibleDC
GetCharacterPlacementA
SelectClipRgn
EnumEnhMetaFile
CopyMetaFileA
SetPixel
SetBkMode
CreateCompatibleBitmap
StartPage
user32
SetClipboardData
IsIconic
GetClassNameA
EmptyClipboard
GetSystemMetrics
DrawIcon
GetMenuState
CharNextA
CallWindowProcA
oleaut32
SafeArrayCreate
SysStringByteLen
GetErrorInfo
SysAllocStringLen
SysAllocStringByteLen
SysReAllocStringLen
SafeArrayGetUBound
SetErrorInfo
LoadTypeLib
SysStringLen
GetActiveObject
CreateErrorInfo
advapi32
DeregisterEventSource
RegCreateKeyA
RevertToSelf
OpenServiceW
LookupPrivilegeValueW
InitiateSystemShutdownA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ