Static task
static1
Behavioral task
behavioral1
Sample
c3616fad2221a945011d363cd15227f2_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c3616fad2221a945011d363cd15227f2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c3616fad2221a945011d363cd15227f2_JaffaCakes118
-
Size
3.8MB
-
MD5
c3616fad2221a945011d363cd15227f2
-
SHA1
3518d8d6b775bfad99b3b71d2bcc5e3bc4d6d56c
-
SHA256
642a149d0827e7cfaea7280f3868fa76d709d71735cf15fcbfb8460701eec75f
-
SHA512
e2c1748cd2930d616a5ce5e080a5717b30fa7bdcba59b9668e8b037949e68b040b15c6feca2da3949c8dcd16144ac5d5b27b35e48e2b319059a7407a54cfb221
-
SSDEEP
98304:FTHg2Nhre+ZS/zZ4F/q8c2a8cTX5/aR1KrkyB9FaR:xRNjZSrewZWcb5/aR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3616fad2221a945011d363cd15227f2_JaffaCakes118
Files
-
c3616fad2221a945011d363cd15227f2_JaffaCakes118.exe windows:5 windows x86 arch:x86
00194ad3028f201b964cf205b198e47f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
GetConsoleCP
GetPrivateProfileSectionW
SetEvent
DeleteCriticalSection
LocalUnlock
WriteFile
ReadFileEx
FindActCtxSectionStringA
SetFileShortNameW
GetFileAttributesA
ReleaseSemaphore
SleepEx
WaitForSingleObject
FindResourceExA
EndUpdateResourceA
GetConsoleTitleW
FreeConsole
SetConsoleTitleA
AttachConsole
ActivateActCtx
ReadConsoleW
ZombifyActCtx
ReleaseActCtx
HeapUnlock
HeapValidate
GetProcessHeaps
LoadLibraryA
LocalAlloc
GetProcAddress
CommConfigDialogW
HeapAlloc
GetCurrentProcess
lstrlenW
SetHandleInformation
GetModuleFileNameA
ResetEvent
ReadFile
InterlockedDecrement
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
HeapFree
TerminateProcess
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetStdHandle
WideCharToMultiByte
CloseHandle
CreateFileA
LCMapStringA
LCMapStringW
GetConsoleMode
FlushFileBuffers
SetEndOfFile
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
gdi32
GetCharWidthFloatW
advapi32
ReportEventW
Sections
.text Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3.7MB - Virtual size: 77.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pifolen Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kupejur Size: 1024B - Virtual size: 626B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.raxa Size: 512B - Virtual size: 23B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tuw Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lize Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ