Static task
static1
Behavioral task
behavioral1
Sample
a3ff4d78013a309dbbe825a3aead848d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a3ff4d78013a309dbbe825a3aead848d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3ff4d78013a309dbbe825a3aead848d_JaffaCakes118
-
Size
19KB
-
MD5
a3ff4d78013a309dbbe825a3aead848d
-
SHA1
2d8e7e9cfc5ef670e9552b668baadd61e9af34de
-
SHA256
8fa2b3bfe4b87897f771371494e9aae85b866e2b022fc68170cc758d7b5bea70
-
SHA512
16c74bd43d6a165770991505e0ca07d501ac4bd601330784b1d9e3430e0eb98b1d00ad8e48a9c18d56f71a8bcbc2c4084be36aaec1ac1e156a8dd571b626b11e
-
SSDEEP
384:YxfkvD82QaKXJIpIB/V3oOKVrYXBDcxoLqINXul0fG34o:qf682QaKZIgLXBDc4ZN+l0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3ff4d78013a309dbbe825a3aead848d_JaffaCakes118
Files
-
a3ff4d78013a309dbbe825a3aead848d_JaffaCakes118.exe windows:4 windows x86 arch:x86
659a0ff5e2665f9cdba11299c3c0aa26
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
GetFileAttributesA
lstrcatA
GetProcAddress
LoadLibraryA
WaitForSingleObject
GetModuleHandleA
CloseHandle
GetCurrentProcessId
GetTempPathA
lstrcpyA
lstrlenA
SetFilePointer
GetModuleFileNameA
CreateFileA
ExitProcess
SetEvent
WriteFile
ExitThread
GetVersionExA
CreateThread
RtlUnwind
user32
ShowWindow
PeekMessageA
CreateWindowExA
TranslateMessage
CreateDesktopA
SetThreadDesktop
DestroyWindow
CharToOemA
DispatchMessageA
wsprintfA
GetForegroundWindow
MsgWaitForMultipleObjects
shell32
SHGetFolderPathA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ