Static task
static1
Behavioral task
behavioral1
Sample
3febf3d76ba3b97bd50ef94f3435cc2b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3febf3d76ba3b97bd50ef94f3435cc2b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3febf3d76ba3b97bd50ef94f3435cc2b_JaffaCakes118
-
Size
812KB
-
MD5
3febf3d76ba3b97bd50ef94f3435cc2b
-
SHA1
2086834d056b8593f9e42f2615fddcd322215a41
-
SHA256
c21eebedd35028f15a8e3650e1d3aeb39fe6fa44091444ebb8a6cd1a69120545
-
SHA512
120df522196cef64b1f78a9fa789b0b37b4680bbf2289cc280ba025a809d37b86183fa431f4dc62e6ab4f0f982a0c50fcbdeb802146914abaadbcbe8108b9d65
-
SSDEEP
24576:wTjBQH42r9un7+iiBrXESM7v3tptrXx6J5:kjt9n7ZAMvD1x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3febf3d76ba3b97bd50ef94f3435cc2b_JaffaCakes118
Files
-
3febf3d76ba3b97bd50ef94f3435cc2b_JaffaCakes118.exe windows:4 windows x86 arch:x86
ea69918e8e6386a7253fbd2acf447334
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Module32First
HeapUnlock
SetConsoleKeyShortcuts
IsSystemResumeAutomatic
GetConsoleAliasExesA
OpenSemaphoreW
BuildCommDCBAndTimeoutsA
user32
GetUserObjectInformationW
EndMenu
SendInput
MB_GetString
EnumDisplaySettingsA
SetCursorContents
TranslateAcceleratorW
UserHandleGrantAccess
EnumDisplaySettingsW
GetWindowRect
DrawIconEx
DefMDIChildProcA
SetThreadDesktop
NotifyWinEvent
MonitorFromPoint
Sections
.text Size: 12KB - Virtual size: 9.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 716KB - Virtual size: 714KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pack32 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE