Static task
static1
Behavioral task
behavioral1
Sample
3c574bded22b4faf05519fe0fb652427_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3c574bded22b4faf05519fe0fb652427_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3c574bded22b4faf05519fe0fb652427_JaffaCakes118
-
Size
39KB
-
MD5
3c574bded22b4faf05519fe0fb652427
-
SHA1
94a3fdc788821cab768db767a3f3e87a66070279
-
SHA256
e12f4b1f999f25deeabe45c32bcbf9ed949c45ef577e4710c43695e1e8eb75e8
-
SHA512
00b831a0eb13c3ef2008b421048a53873fa47ef633215415e2501e58c5eb200e6f9ffb3b942185d8f62646f8fea3aeb69665eb93293fc5269fdd9809a50954e8
-
SSDEEP
768:9QDnTVzAhIhvuWrgb36R+klfCZV9deuYqeeyxZP6:wzJv9v6fJdeeyxZi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c574bded22b4faf05519fe0fb652427_JaffaCakes118
Files
-
3c574bded22b4faf05519fe0fb652427_JaffaCakes118.exe windows:1 windows x86 arch:x86
ecf4eaa9b8ad246e3c8c058e1b1afb3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
SetConsoleMenuClose
WriteConsoleA
OpenFile
GetNamedPipeHandleStateA
CopyFileExA
GetProfileSectionW
TerminateJobObject
ReleaseMutex
FindClose
GetVolumeNameForVolumeMountPointA
VirtualAlloc
SetFileAttributesA
VirtualFree
CreateJobObjectA
user32
MessageBoxIndirectA
GetMonitorInfoA
SendMessageTimeoutW
DestroyMenu
SetDlgItemTextA
TileWindows
DisplayExitWindowsWarnings
SendNotifyMessageA
CascadeWindows
IsWindowVisible
CallWindowProcA
Sections
CODE Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 47KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ