Static task
static1
Behavioral task
behavioral1
Sample
3c6f15826b5ee538d1dce87f3a267f10_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3c6f15826b5ee538d1dce87f3a267f10_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3c6f15826b5ee538d1dce87f3a267f10_JaffaCakes118
-
Size
64KB
-
MD5
3c6f15826b5ee538d1dce87f3a267f10
-
SHA1
5e3a67c3537c8425f7e8faa7fa79784436ca3ec8
-
SHA256
9906e5470b7934fe4695ca4b6f6a31dea6670ab45e68581e957063dbfa4a8cb4
-
SHA512
7abdd44ec4b2958c1e97163ccea5eb41a8e2e22ee0ed47fcce201887e7dd21b28badfd518b880e6cd208d86c011976ef88f0e52010187bb8fb819761cebffc55
-
SSDEEP
768:7L8IROiU0qaXOLIFqaZ9ypL0vzJDsOq2YAppCP:7LVRM0LnwoQwrJgOqHH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c6f15826b5ee538d1dce87f3a267f10_JaffaCakes118
Files
-
3c6f15826b5ee538d1dce87f3a267f10_JaffaCakes118.exe windows:4 windows x86 arch:x86
f002d20ad28f4c4db5d81d9d601d8a8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dbnmpntw
ConnectionRead
ConnectionWrite
ConnectionVer
kernel32
TlsGetValue
GetDateFormatW
SetCurrentDirectoryA
ExpandEnvironmentStringsA
WriteProcessMemory
HeapCreate
SystemTimeToFileTime
GetDiskFreeSpaceA
CreateNamedPipeW
SleepEx
GetTimeFormatA
GetNumberFormatA
GetProcessHeap
GetFullPathNameA
LoadLibraryA
GetAtomNameA
CompareStringA
GetPrivateProfileIntA
InterlockedExchange
CreateDirectoryA
shlwapi
PathCompactPathA
PathCombineA
UrlIsOpaqueA
UrlGetPartA
UrlHashA
UrlGetLocationA
UrlCombineA
PathCommonPrefixA
UrlIsA
UrlCanonicalizeA
themeui
DllCanUnloadNow
DllGetClassObject
DllInstall
DllCanUnloadNow
DllGetClassObject
user32
GetMessageA
IsZoomed
LoadImageW
CharToOemA
PeekMessageA
DispatchMessageA
SetFocus
wsprintfA
IsWindow
GetCaretPos
GetWindowLongA
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ