_MyFunc125@4
Static task
static1
Behavioral task
behavioral1
Sample
3c5fcc8c664439dab4697cc1f81e8298_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3c5fcc8c664439dab4697cc1f81e8298_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3c5fcc8c664439dab4697cc1f81e8298_JaffaCakes118
-
Size
10.5MB
-
MD5
3c5fcc8c664439dab4697cc1f81e8298
-
SHA1
ff4ca1aad3e2896d90d6dffd9fa5b054698656de
-
SHA256
366823c206ec42f3724746803d925618cad8b3aa43c0bb73169ef157cb68badd
-
SHA512
3772705430ba459d06eb1b633fe4ec306076c521f6eac812174ef07aaa308a8ea4996f2a0b9412800348a7d39a21feccbad780da89a553da163565c919931397
-
SSDEEP
49152:iCs+vZDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDj:LJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c5fcc8c664439dab4697cc1f81e8298_JaffaCakes118
Files
-
3c5fcc8c664439dab4697cc1f81e8298_JaffaCakes118.exe windows:5 windows x86 arch:x86
496369fd47d36cd777915f9d6b0745a3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualQuery
SetConsoleTextAttribute
CreateDirectoryExA
ConnectNamedPipe
CallNamedPipeW
GetNumberFormatA
CreateDirectoryExW
ReadConsoleInputA
GetSystemPowerStatus
GetFileAttributesA
AttachConsole
MoveFileW
EnumCalendarInfoA
LocalAlloc
GetFileType
SetConsoleDisplayMode
FoldStringW
GetPrivateProfileSectionNamesA
EnumDateFormatsA
FreeEnvironmentStringsW
BuildCommDCBA
VirtualProtect
GetFileTime
GetFileAttributesExW
DeleteFileW
GetFileInformationByHandle
FindFirstFileW
EnumResourceNamesW
DebugActiveProcess
DisableThreadLibraryCalls
ExitProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetCommandLineA
RaiseException
RtlUnwind
IsDebuggerPresent
GetLastError
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
GetStdHandle
DeleteCriticalSection
GetStartupInfoW
HeapAlloc
HeapFree
HeapSize
SetLastError
GetCurrentThreadId
GetProcessHeap
GetModuleFileNameA
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetFilePointerEx
WriteConsoleW
FlushFileBuffers
HeapReAlloc
LCMapStringW
ReadFile
ReadConsoleW
GetStringTypeW
OutputDebugStringW
CreateFileW
CloseHandle
gdi32
GetBitmapDimensionEx
GetEnhMetaFileHeader
StartDocW
InvertRgn
Exports
Exports
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10.3MB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ