Static task
static1
Behavioral task
behavioral1
Sample
b3698f94e5816db3c016cd5d80dc8ffe_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3698f94e5816db3c016cd5d80dc8ffe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3698f94e5816db3c016cd5d80dc8ffe_JaffaCakes118
-
Size
131KB
-
MD5
b3698f94e5816db3c016cd5d80dc8ffe
-
SHA1
cf878f936ee9a22744eab32a31e01bb188f47d91
-
SHA256
5945d3afbe4e3540b2bb92ca664da2b3974e70a7300aa2ce658f6398dc6d805e
-
SHA512
02854ba399e073d808608f91594461298751727b0f3110b881f47fa306d8814c35e70766f597522e67cebc958cbee4aca42d70596aef66bcd0720f59b9ca748d
-
SSDEEP
3072:E9WwuVd1FXBydsZFCLlnIw5w6uvlFrnxzO7:9wub1FxydsCFIqzud9I7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3698f94e5816db3c016cd5d80dc8ffe_JaffaCakes118
Files
-
b3698f94e5816db3c016cd5d80dc8ffe_JaffaCakes118.exe windows:4 windows x86 arch:x86
da1e1193450d8390b03aec3762289a94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
InterlockedExchange
lstrcmpiA
SetLastError
LockResource
GetModuleFileNameA
GetEnvironmentVariableA
SetFilePointer
QueryPerformanceCounter
LocalAlloc
SizeofResource
LeaveCriticalSection
TerminateProcess
GetStartupInfoA
EnumResourceNamesW
lstrlenW
GetSystemTimeAsFileTime
WideCharToMultiByte
LoadResource
GetVersionExA
InterlockedCompareExchange
GetModuleHandleA
ExitProcess
GetCurrentThreadId
GetCurrentProcessId
GetTickCount
RaiseException
GetLastError
Sleep
MultiByteToWideChar
EnterCriticalSection
FindResourceA
CreateProcessA
FindResourceExA
GetCurrentProcess
user32
MessageBoxW
GetSystemMetrics
LoadImageA
LoadIconA
DestroyWindow
UnregisterClassA
LoadStringW
CharNextA
CharNextW
shlwapi
PathAddBackslashW
clusapi
CloseCluster
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rscr Size: 512B - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ