Static task
static1
Behavioral task
behavioral1
Sample
a3cffb9f3c2408aeb513845301c93813_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a3cffb9f3c2408aeb513845301c93813_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3cffb9f3c2408aeb513845301c93813_JaffaCakes118
-
Size
153KB
-
MD5
a3cffb9f3c2408aeb513845301c93813
-
SHA1
2e46887176be845aa77589ea3c20d25283f54ff7
-
SHA256
9ee05d3d51523b68f727566cff2e9efddbe449fac1a8d6a7e824a14d20d1c717
-
SHA512
0e8d093d74c75d5d1c192a80f62db671c39a5b37540e173ac7f795b29380fb1f46dc67aa39b7fcf963323ae0e975100066fdaf771f1005103cb7fea8d9cf7797
-
SSDEEP
3072:FircLMdyrY9DuwNVOx3jDs19RC9+KdgSehALQZNmzrhXgbRP:ccwuO3NYDsNAdnQWMP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3cffb9f3c2408aeb513845301c93813_JaffaCakes118
Files
-
a3cffb9f3c2408aeb513845301c93813_JaffaCakes118.exe windows:4 windows x86 arch:x86
9a1ab7ceeeaf4ab57055ef140fc73f96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
GetDriveTypeA
RaiseException
GetLocaleInfoA
VirtualProtect
LockResource
InterlockedExchange
HeapCreate
GlobalDeleteAtom
FoldStringA
SetErrorMode
GlobalFree
Sleep
GetStdHandle
GetLastError
CloseHandle
EnterCriticalSection
GlobalAddAtomA
GlobalUnlock
SetConsoleCP
GetACP
user32
DrawTextA
ValidateRect
GetFocus
IsIconic
GetParent
ClipCursor
GetMenuItemInfoA
GetWindow
GetWindowTextA
EndPaint
GetCursorPos
ShowWindow
SetForegroundWindow
GetClassNameA
GetActiveWindow
ReleaseDC
DrawEdge
CharToOemBuffA
BeginPaint
version
VerFindFileA
VerQueryValueA
GetFileVersionInfoA
VerInstallFileA
GetFileVersionInfoSizeA
rasadhlp
WSAttemptAutodialName
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ