Static task
static1
Behavioral task
behavioral1
Sample
3113c8d33722f033191911c298bec7aa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3113c8d33722f033191911c298bec7aa_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3113c8d33722f033191911c298bec7aa_JaffaCakes118
-
Size
189KB
-
MD5
3113c8d33722f033191911c298bec7aa
-
SHA1
ae41d1608ea74084fab060c8607c49c110866a9e
-
SHA256
737734567240229a0c3ae787da4a28271e52a21100a15fd795c303be9ab73272
-
SHA512
e7b170c3e46a22881fbe44ebd6fe5f5c7c1cbabc2b695801f020022cf70899957ff86ae2cab3d58b92b83697227f0629d0bf7dc78ae937375dc4a7a921526e60
-
SSDEEP
3072:DXftM9b1XomBw93GG6xnAYZP6blFcMe4oPWFgCryKg23BWjaN6vGUedMmYIFk7En:DXVM9BXJ63hcZih1ejS1+/gBWjve9A4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3113c8d33722f033191911c298bec7aa_JaffaCakes118
Files
-
3113c8d33722f033191911c298bec7aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
4cee3cbbf4afb12f82b2b811e2dca1a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
GetDlgItem
MoveWindow
ReleaseCapture
ReleaseDC
GetSysColor
GetWindowInfo
IsWindow
FillRect
GetWindowLongA
SetWindowPos
GetDC
LoadCursorA
SetWindowLongA
SetCursor
SetCapture
ole32
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
shell32
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
winmm
mciSendCommandA
sndPlaySoundA
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
SetTapePosition
FindClose
ClearCommError
GetLocalTime
InterlockedExchange
GetCurrentProcessId
GetVersion
EnumResourceNamesA
GetWindowsDirectoryA
FatalExit
Sleep
FindFirstFileA
Sections
.text Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lib Size: 512B - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ