Static task
static1
Behavioral task
behavioral1
Sample
a3f4451dcd6e23f81e1b9d92b10d8f83_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a3f4451dcd6e23f81e1b9d92b10d8f83_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3f4451dcd6e23f81e1b9d92b10d8f83_JaffaCakes118
-
Size
209KB
-
MD5
a3f4451dcd6e23f81e1b9d92b10d8f83
-
SHA1
31c1afb34f760ff3b47e367760b921e6b2ed9f71
-
SHA256
feb9cef38fdcccbbf74115081505d421f3aa72d55e6521c170bbbdbf820414a9
-
SHA512
34ac96803222be676588baad7e7610c11a154564d70454a284fe9b154ed544a0d74c97a94f483fee9329265c90696a5b90b8eedf6b7a0d972a83ad12cc370804
-
SSDEEP
3072:ZQOCcGMApYNJgxDuSJg30XtQ1KscMHMrzk/PkUf0wqxTadXp36e:ZQhQgxDLPS9zUzKPkUfyxadp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3f4451dcd6e23f81e1b9d92b10d8f83_JaffaCakes118
Files
-
a3f4451dcd6e23f81e1b9d92b10d8f83_JaffaCakes118.exe windows:5 windows x86 arch:x86
9eff7cbf7cf80d51bcec48b515dae7b6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FreeDDElParam
GetQueueStatus
UnhookWindowsHookEx
CharUpperBuffA
EnableMenuItem
BeginDeferWindowPos
InflateRect
CharUpperW
ScrollDC
RegisterClassExW
SetClassLongW
AdjustWindowRectEx
GetAsyncKeyState
GetFocus
RemoveMenu
GetWindowDC
KillTimer
MessageBoxW
IsWindowUnicode
OpenInputDesktop
EnumChildWindows
TranslateMessage
PackDDElParam
DispatchMessageW
GetScrollInfo
EnableWindow
kernel32
TlsFree
PeekConsoleInputA
CloseHandle
SetProcessAffinityMask
Sleep
GetLocaleInfoW
GetDateFormatA
GetFileAttributesExA
MapViewOfFile
SetCurrentDirectoryA
TerminateProcess
ReadConsoleInputA
VirtualAllocEx
CreateMutexA
LocalFileTimeToFileTime
FindNextFileA
FileTimeToSystemTime
InterlockedDecrement
ReadConsoleA
CreateFileW
EnterCriticalSection
GetThreadTimes
WaitForMultipleObjects
MultiByteToWideChar
GetCurrentProcess
ntdll
NtSuspendThread
ZwOpenSection
NtQueryInformationPort
NtWriteFile
Sections
.text Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ