Static task
static1
Behavioral task
behavioral1
Sample
3688aa4ecc730d94837cf07376e6be30_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3688aa4ecc730d94837cf07376e6be30_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3688aa4ecc730d94837cf07376e6be30_JaffaCakes118
-
Size
636KB
-
MD5
3688aa4ecc730d94837cf07376e6be30
-
SHA1
0ff1d0a99b2e860a1a8177a24c5ace1759ee34fe
-
SHA256
b15110dbb2a0e032d71586eb447be9e4bc405d1204a098de630933fb097182be
-
SHA512
6d3059c6bbdff21dce0869db82c1725ffafa51c4b222c6c7be8a627d53d1be27c075b26d6b2c81b44c7bb45c78b96cd7f22d414b4da937b74e1a70569c97961d
-
SSDEEP
12288:WZTbNaiwl4aupD+KQLZVTQHLhlvK2OpHRF9WXlrfGPPQVTP3:WTa0t+KQfQHNlvK2+F4F/dP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3688aa4ecc730d94837cf07376e6be30_JaffaCakes118
Files
-
3688aa4ecc730d94837cf07376e6be30_JaffaCakes118.exe windows:4 windows x86 arch:x86
88ff2b4b39dd7f28eec640f005afff37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
SetLastError
GetUserDefaultLangID
HeapReAlloc
VirtualProtect
GetCommandLineA
GlobalUnlock
GetModuleHandleA
WaitForMultipleObjects
GlobalSize
CompareFileTime
lstrlenA
GetAtomNameA
InterlockedExchange
GetVersion
GetConsoleCP
LoadLibraryExA
ResumeThread
GetTickCount
GetConsoleDisplayMode
HeapCreate
user32
SetForegroundWindow
GetFocus
GetCursorPos
ShowWindow
FrameRect
GetTitleBarInfo
wsprintfA
GetWindow
ReleaseDC
EndPaint
GetParent
DrawTextA
GetClassNameA
DragDetect
AnyPopup
FillRect
CreateIcon
GetDC
BeginPaint
rastapi
PortClose
DeviceListen
DeviceDone
DeviceConnect
AddPorts
quartz
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ