Static task
static1
Behavioral task
behavioral1
Sample
d3d3e2bba6301e0401526df9ac447ebe_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3d3e2bba6301e0401526df9ac447ebe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3d3e2bba6301e0401526df9ac447ebe_JaffaCakes118
-
Size
134KB
-
MD5
d3d3e2bba6301e0401526df9ac447ebe
-
SHA1
056c8357f35def1ccfb5f6e3030b4bb5ad868ba0
-
SHA256
7f1a118b2bff2f6d88ab0a2655cf44b5483c097503f061510d953958a064e0c5
-
SHA512
52d95888fd676fd15e8e01fd0df465e7c73c14c10edd5000e6f3a12648fcd2d9451a32276e8365c476e64ec7dc263f7ee58b9f94f1fdd3ab3fa47ddf50029962
-
SSDEEP
3072:K3vcPgN2Abj7SnYkyx9r6k42YURGlbO1elP9ER5lI:IcPg97Ivyx9r6T2YXba9Xl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3d3e2bba6301e0401526df9ac447ebe_JaffaCakes118
Files
-
d3d3e2bba6301e0401526df9ac447ebe_JaffaCakes118.exe windows:5 windows x86 arch:x86
8af4a0603624a3ab1c2e39cfca864345
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrChrNW
SHRegGetBoolUSValueA
AssocQueryStringA
StrRetToStrA
wnsprintfA
SHOpenRegStream2W
SHRegGetUSValueW
PathSearchAndQualifyW
StrFormatKBSizeA
PathRelativePathToA
StrCmpW
HashData
StrRStrIA
StrCatBuffA
UrlIsOpaqueA
SHQueryValueExA
StrRChrIW
UrlIsOpaqueW
SHDeleteOrphanKeyW
kernel32
FileTimeToLocalFileTime
CompareFileTime
SearchPathW
FreeEnvironmentStringsA
LoadLibraryA
GlobalAlloc
FlushViewOfFile
GetCommMask
GetQueuedCompletionStatus
FormatMessageA
RemoveVectoredExceptionHandler
GetCurrentProcessId
SetSystemPowerState
GetLogicalDriveStringsW
SetCalendarInfoA
GetPriorityClass
ReadConsoleInputExW
FlushConsoleInputBuffer
VirtualAlloc
VerifyConsoleIoHandle
ReadConsoleOutputAttribute
FindResourceExA
TermsrvAppInstallMode
GetStartupInfoA
GlobalFix
CancelTimerQueueTimer
DeleteTimerQueue
QueryDosDeviceW
AddLocalAlternateComputerNameW
SetConsoleInputExeNameA
EscapeCommFunction
InterlockedExchange
ClearCommError
BaseCleanupAppcompatCacheSupport
GetProcessPriorityBoost
GetConsoleAliasExesLengthA
SystemTimeToFileTime
InvalidateConsoleDIBits
GetShortPathNameW
SetLastError
InterlockedDecrement
SetConsoleMaximumWindowSize
MulDiv
SetProcessPriorityBoost
crtdll
setvbuf
_y1
_abnormal_termination
_cscanf
_getche
__argc_dll
_ismbbkana
_mbsinc
strtok
_cexit
_eof
iswspace
_ftol
__fpecode
_wcsnset
_jn
_ismbclegal
labs
wcscmp
asin
iswpunct
opengl32
wglUseFontOutlinesA
glRasterPos4sv
glRasterPos3f
glTexEnvfv
wglSetPixelFormat
glTexCoord4i
glRectf
glTexCoord2fv
glRasterPos4dv
glRectd
glLightModeliv
glVertex3sv
glTexEnvi
glRasterPos2s
glTexCoord1iv
glTexSubImage1D
glAccum
glTexCoord1d
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ