Static task
static1
Behavioral task
behavioral1
Sample
30a9babc4cbc6f244ef0930fbb25f239_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
30a9babc4cbc6f244ef0930fbb25f239_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
30a9babc4cbc6f244ef0930fbb25f239_JaffaCakes118
-
Size
745KB
-
MD5
30a9babc4cbc6f244ef0930fbb25f239
-
SHA1
bca6877f4c30aa99d5648713c2e9720d16acc6ab
-
SHA256
ab9531e9f9a9b3d4c22bfe17e653af78552bcca475655300c0bf39c3b0b9506f
-
SHA512
b18c020af642747add2c15a6b7251a6c5d7546971deeba42146f9691d2179fe4fac922a5361b583773cbe0060bfc43af14a8d121d8062d06a7ed769475b8fb73
-
SSDEEP
12288:K4S+2Dh5J/eD6qyV51p7sstpptHegRXWdWJnXYhJkw3GwgHBH+Z:m+8h5J/eGqM1pYsn7NRJnX7wl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30a9babc4cbc6f244ef0930fbb25f239_JaffaCakes118
Files
-
30a9babc4cbc6f244ef0930fbb25f239_JaffaCakes118.exe windows:5 windows x86 arch:x86
e3f4fb3adda9331fedaa2d48ee9d3a9c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
SetLastError
GetCurrentDirectoryW
GetModuleHandleA
GetCommandLineA
GetEnvironmentVariableW
EnterCriticalSection
GetFileType
GetCommandLineW
WaitForSingleObject
SuspendThread
HeapFree
CloseHandle
GetFileTime
GlobalLock
ReadFile
SetLastError
SetFileAttributesW
MapViewOfFile
GetDriveTypeA
LocalSize
HeapCreate
Sleep
ExitProcess
IsBadReadPtr
uxtheme
DrawThemeBackground
OpenThemeData
CloseThemeData
GetThemeTextMetrics
CloseThemeData
GetThemeColor
SetWindowTheme
DrawThemeEdge
GetThemeBool
GetWindowTheme
GetThemeTextExtent
GetThemeEnumValue
IsThemeActive
dbnmpntw
ConnectionVer
ConnectionVer
ConnectionVer
ConnectionVer
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE