Static task
static1
Behavioral task
behavioral1
Sample
36e4c41e454227d7430b728d346a75b7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
36e4c41e454227d7430b728d346a75b7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
36e4c41e454227d7430b728d346a75b7_JaffaCakes118
-
Size
2.3MB
-
MD5
36e4c41e454227d7430b728d346a75b7
-
SHA1
a87e6a36261dffa91a7e4f1e0faf42e56d29faf2
-
SHA256
019546bccc0dddb8c6302bd7ee651ad9e38aecbeb91488fd7a47f79e18ee87f8
-
SHA512
4b55142729c0f242372c227864dee72b55f813c7982de5ee86fb6e30150925eb346f81c19bc89b5ba16eccb8062ab0badfd43378535785091fc5bc0961ccaa35
-
SSDEEP
49152:8LFL2nR4GfQ1gStuu92na8Str4RC9q3qdCrTzfS6xfkgen16VrS:kinR4GfQ1kurN4RC9d4TzfvpTe16rS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36e4c41e454227d7430b728d346a75b7_JaffaCakes118
Files
-
36e4c41e454227d7430b728d346a75b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
14278a0b6d019df8460b1a18083a6641
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleMode
TlsFree
GetStartupInfoA
HeapAlloc
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetEnvironmentStrings
GetTempFileNameW
MulDiv
LocalAlloc
FreeEnvironmentStringsA
CloseHandle
LCMapStringA
SetEndOfFile
EnterCriticalSection
SetConsoleCP
GetCurrentThreadId
GetModuleHandleA
CreateFileW
GetProcessHeap
GetSystemDefaultLangID
RtlUnwind
TlsGetValue
GetOEMCP
ExitProcess
GetProcAddress
SetStdHandle
InterlockedCompareExchange
lstrlenW
GetCommandLineA
LCMapStringW
VirtualProtect
InterlockedDecrement
FormatMessageW
Sleep
LoadLibraryA
FindClose
GetACP
InitializeCriticalSection
GetLastError
user32
LoadStringW
GetSubMenu
EndPaint
SetRect
OffsetRect
DefWindowProcA
GetSysColor
MoveWindow
CreatePopupMenu
SystemParametersInfoA
GetPropW
gdi32
GetDeviceCaps
GetTextColor
CreateDIBSection
SetWindowOrgEx
GetClipBox
ole32
StgSetTimes
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoInitializeEx
msvcrt
malloc
_adjust_fdiv
advapi32
RegOpenKeyExW
lz32
LZClose
Sections
.text Size: 381KB - Virtual size: 381KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.9MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 26B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ