Static task
static1
Behavioral task
behavioral1
Sample
f3a8666ace25d0597e31c0a40f424e07_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f3a8666ace25d0597e31c0a40f424e07_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
f3a8666ace25d0597e31c0a40f424e07_JaffaCakes118
-
Size
278KB
-
MD5
f3a8666ace25d0597e31c0a40f424e07
-
SHA1
4fd33f59c16dec746c493d123c44f1ea443512b3
-
SHA256
682f020d5d5028c8dd87b0d61de06df7de6658340aac65cf64abea359fa188fd
-
SHA512
14befc8134043ec3bd90e2178ca6ffc5e54de26a1c1f1c32e25a3a2e7d5e980309fa87acfb3a6e12c5b63b37621c9a0a96c1adb1b41ebf176f011b5dc6b946f3
-
SSDEEP
6144:upwR0zzOv/+iqBMZRRWPL4Qm4MTX2ef6cv3:GwR0ziHI+cLzXA2eyU3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3a8666ace25d0597e31c0a40f424e07_JaffaCakes118
Files
-
f3a8666ace25d0597e31c0a40f424e07_JaffaCakes118.exe windows:4 windows x86 arch:x86
51e60184c7ef3ba2bf5d24f70693da89
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceExA
GlobalAddAtomW
InterlockedExchange
LocalFree
GetModuleHandleA
EnumResourceTypesA
GetLastError
GetProcessHeap
GetCommandLineA
FindNextFileW
RaiseException
SizeofResource
HeapFree
HeapAlloc
GetCurrentDirectoryA
FindFirstFileA
EnumResourceNamesA
FindFirstFileW
LoadLibraryW
GetProcAddress
CloseHandle
LoadResource
EnumResourceNamesA
SetLastError
LockResource
GetCurrencyFormatA
FormatMessageA
GlobalFree
MultiByteToWideChar
EnumResourceLanguagesA
Sleep
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyA
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
user32
wsprintfW
PostThreadMessageW
CharNextA
GetMessageW
CharUpperW
EnumWindows
MessageBoxA
IsWindowVisible
GetWindowThreadProcessId
LoadStringA
DispatchMessageA
GetWindowTextA
KillTimer
SetTimer
PeekMessageW
wsprintfA
Sections
.text Size: 150KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ