Static task
static1
Behavioral task
behavioral1
Sample
3c8a1c434ab6a03284ca736f2b4848f0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3c8a1c434ab6a03284ca736f2b4848f0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3c8a1c434ab6a03284ca736f2b4848f0_JaffaCakes118
-
Size
164KB
-
MD5
3c8a1c434ab6a03284ca736f2b4848f0
-
SHA1
54b85dfcbf2b1fed78c00ccb6c5c11ef0a3f4311
-
SHA256
723e176e58fd824ca80dda5cb3bda3e79bcc0adb320600157b6700c15bd5dc15
-
SHA512
b6d1212976ec9e68281afe9ee8199312a7576a1c798ef19e8d698164b5d48aa3597b918539376d757fe45da8cc911de0526fcf090eac7b1f9bd7b06bed8f66f9
-
SSDEEP
3072:vaXVMFnJGjXCnqauvQcxd/EV8aCVkxFxH00WIbkCIm+WKthS:iXVMOrwqsEpEV8aCqx7U0hgY+hS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c8a1c434ab6a03284ca736f2b4848f0_JaffaCakes118
Files
-
3c8a1c434ab6a03284ca736f2b4848f0_JaffaCakes118.exe windows:5 windows x86 arch:x86
4e322efbc86bee447eeb310fb8a05c74
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ExtractAssociatedIconA
ExtractAssociatedIconW
ShellExecuteExA
ShellExecuteA
ExtractIconW
ShellAboutA
FindExecutableA
ole32
CoCreateInstance
CoTaskMemAlloc
StringFromGUID2
OleConvertIStorageToOLESTREAM
advapi32
RegRestoreKeyA
LookupPrivilegeValueA
ImpersonateSelf
SetPrivateObjectSecurityEx
GetSecurityDescriptorGroup
GetSidIdentifierAuthority
RegQueryInfoKeyA
OpenServiceA
kernel32
EnterCriticalSection
HeapAlloc
LeaveCriticalSection
GetSystemTimeAsFileTime
HeapReAlloc
LoadLibraryW
RtlUnwind
HeapSize
SetLastError
MoveFileW
PulseEvent
OpenFile
EnumUILanguagesA
SetCommMask
GetCommandLineW
FindFirstChangeNotificationW
MultiByteToWideChar
InterlockedDecrement
GetCPInfo
GetCommandLineA
HeapSetInformation
GetStartupInfoW
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
GetCurrentThreadId
GetLastError
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapFree
WideCharToMultiByte
LCMapStringW
GetStringTypeW
Sleep
IsProcessorFeaturePresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 123KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE