Static task
static1
Behavioral task
behavioral1
Sample
b3bce8549a2e6d0ed2f0f99c251e0883_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b3bce8549a2e6d0ed2f0f99c251e0883_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3bce8549a2e6d0ed2f0f99c251e0883_JaffaCakes118
-
Size
374KB
-
MD5
b3bce8549a2e6d0ed2f0f99c251e0883
-
SHA1
13856bd581ebc9527e5a6ff198eadc177254cb17
-
SHA256
366d3b3417a08fb8d118b9ad64ba596fc8dad8eb1f73177d3b982b7909d084f9
-
SHA512
f9eb40d452aecf1ffd4558d66efc86d9c03b89b66d6ff1360fd4b6be7dc6a5acd84e31ddd174c9a050b2df4c721b9f3033b4a0401422b40279d0c3ce26cce47c
-
SSDEEP
6144:7vnob+RMYKP9EoxGcTYNh91DQJ7w6Mcx8MYeWKnEWYzXTz+VNypJOVglH5fDsf1D:7VRM2L9/u5Wcxr8/frTzcNS0G3fDsf1D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3bce8549a2e6d0ed2f0f99c251e0883_JaffaCakes118
Files
-
b3bce8549a2e6d0ed2f0f99c251e0883_JaffaCakes118.exe windows:4 windows x86 arch:x86
9f409d2733271a62df00ca3d301b46dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
GetCurrentProcessId
FindAtomA
GetPrivateProfileStringA
SuspendThread
GetEnvironmentVariableW
GetNumberFormatA
InitializeCriticalSection
GetCurrentThreadId
TlsGetValue
ReadFile
lstrlenW
FindClose
GetConsoleAliasA
CreateEventW
GetDriveTypeW
LocalFlags
HeapCreate
ResumeThread
LoadLibraryW
user32
DrawTextA
CallWindowProcW
GetClassInfoA
GetKeyboardType
SetFocus
IsWindow
EndDialog
DrawStateW
DispatchMessageA
GetSysColor
CreateWindowExA
GetClientRect
GetSysColor
srclient
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
clbcatq
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ