Static task
static1
Behavioral task
behavioral1
Sample
3c1f2075d0ef2a08501c9cac019a307e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3c1f2075d0ef2a08501c9cac019a307e_JaffaCakes118
-
Size
110KB
-
MD5
3c1f2075d0ef2a08501c9cac019a307e
-
SHA1
69864dfad7b871ea81f74cb76a240fe2c4d0f053
-
SHA256
09a09d56d898d8990f0bc92ccf64424f7480252f2700fc90a0c55e1d92e01e16
-
SHA512
9ca977b4036d77321099ae7169d694bd197cb6a2da3613d25207cd878d0443e69c7ae19850d4ed85ef4ea4379cc0617061ce9a969e6777739c660d117adb325d
-
SSDEEP
768:h2sLL2ReHY7qCVmByFXoZk02i14lzg+HkvaoKUgPfTeqGqbjX1ay3Iun136nt:h3L2R8upEmmOlzgCkvNcPfT6q/kyDn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c1f2075d0ef2a08501c9cac019a307e_JaffaCakes118
Files
-
3c1f2075d0ef2a08501c9cac019a307e_JaffaCakes118.exe windows:5 windows x86 arch:x86
c55c9989c9eb9e5f8782d7857d31ccb4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
ExitProcess
lstrlenA
advapi32
RegQueryInfoKeyW
RegEnumValueA
user32
GetMenu
DrawTextW
AppendMenuW
GetWindowTextLengthA
DrawIcon
GetDlgItem
Sections
.mncki Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ognk Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ljlbn Size: 67KB - Virtual size: 427KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kemh Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mglcc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ