Static task
static1
Behavioral task
behavioral1
Sample
b3b57e930c2614b1234b7cae38317f11_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b3b57e930c2614b1234b7cae38317f11_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3b57e930c2614b1234b7cae38317f11_JaffaCakes118
-
Size
93KB
-
MD5
b3b57e930c2614b1234b7cae38317f11
-
SHA1
6df2a35cf4c0693685306175b9c0a90ee01d2c0f
-
SHA256
3487eee9abff9a0d4d97c186893f45b0a728b8c6984c9c4fab5d033d9a5e802f
-
SHA512
9c66596b7d24d0eb76ab32ede0a6995f3bd13f5af5812ffe00ed44fc46bbd8ac34d2dea16aaef826ce7b239308d90e3a1a9889cfaf823dc06ce794fe53995474
-
SSDEEP
1536:CnRnjZcAMt2GK0+ANK6ye+5nYa9vzaKye1jmt8NiwSVwa2ZuvFLPLeQhywW:CRnNcAMEGB+5YiaKlC84ea2Z4pUwW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3b57e930c2614b1234b7cae38317f11_JaffaCakes118
Files
-
b3b57e930c2614b1234b7cae38317f11_JaffaCakes118.exe windows:4 windows x86 arch:x86
08cf1af1082f3d7a742c5ab9b574ffdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
LoadLibraryExA
GlobalFree
GlobalUnlock
SetConsolePalette
LoadResource
GetOEMCP
LocalFree
CloseHandle
GetLastError
GetStdHandle
HeapCreate
FreeConsole
GlobalAddAtomA
lstrcat
VirtualProtect
DeleteAtom
IsBadCodePtr
EnterCriticalSection
GlobalAddAtomA
WriteProfileStringA
user32
GetForegroundWindow
GetParent
DrawEdge
GetClassNameA
GetClassInfoExA
GetWindowTextLengthA
GetActiveWindow
ReleaseDC
GetFocus
BeginPaint
GetWindow
ValidateRect
CloseWindow
AlignRects
ShowWindow
IsIconic
EndPaint
GetDC
GetWindowTextA
mprapi
MprAdminUserGetInfo
MprAdminUserWrite
MprAdminUserClose
MprAdminUserOpen
MprAdminUserRead
linkinfo
CreateLinkInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ