Static task
static1
Behavioral task
behavioral1
Sample
a3f53a12cc66d0cf9325698caebcebc4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a3f53a12cc66d0cf9325698caebcebc4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3f53a12cc66d0cf9325698caebcebc4_JaffaCakes118
-
Size
132KB
-
MD5
a3f53a12cc66d0cf9325698caebcebc4
-
SHA1
2f72b415ae4380423f6e91d6b5c494dd05b82bac
-
SHA256
c785fa694833d9badd1732077b71d022f4b793dcadc7dda18bd17f6398ea8189
-
SHA512
aaf8bd26d9d4814044aaa40f3222b5f07bfb15d85b452e004b459c8e38049b0981414807a78082c9770c273890893d095ac5d62fd541fdb1dec54e4811e10b9b
-
SSDEEP
3072:pRIMVHFxNLN1t0pawFaGSNV3loM5iuZ9qrv:pFHFj5z0pSNjB9Z9E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3f53a12cc66d0cf9325698caebcebc4_JaffaCakes118
Files
-
a3f53a12cc66d0cf9325698caebcebc4_JaffaCakes118.exe windows:4 windows x86 arch:x86
90fa73d9ac5de31f9791058134162aaa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
DeleteFileA
ExitProcess
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTempFileNameA
HeapSize
InterlockedExchange
IsDebuggerPresent
LoadLibraryA
ResetEvent
VirtualAlloc
VirtualFree
lstrcmpiA
lstrcpyA
user32
DefWindowProcA
DestroyMenu
EnableMenuItem
GetParent
GetSubMenu
GetWindowThreadProcessId
KillTimer
LoadCursorA
SetForegroundWindow
TranslateMessage
gdi32
Escape
ExcludeClipRect
GetBrushOrgEx
GetCurrentPositionEx
GetTextExtentPointA
GetWindowOrgEx
RestoreDC
shell32
DoEnvironmentSubstW
SHGetFileInfoW
SHGetPathFromIDListA
SHGetSettings
SHGetSpecialFolderPathA
ShellExecuteA
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ