Static task
static1
Behavioral task
behavioral1
Sample
37d5bef4b730abcf9f25c7f937ea67ea_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
37d5bef4b730abcf9f25c7f937ea67ea_JaffaCakes118
-
Size
184KB
-
MD5
37d5bef4b730abcf9f25c7f937ea67ea
-
SHA1
19fb11a55d20d03afb615a42925696ac6db83c9c
-
SHA256
c059fbba8f4e95a938e6843544c29387f736d8becf9eec2e5b583a09491b9192
-
SHA512
859142b6fd62e0af077184ea9a4ce51cbbd7d8bbeba26bcb2fe7b2f7d23c25a8973ef771a459fe9f71b3a09889bd7e4732485038792b0a7fe31ef3afd637c682
-
SSDEEP
3072:cVi/IbhPRQaEjDuCy0iL0F0OJDcYZ+MAFwzYRw3s3lB7USot5+Lk:0sQEN1iQwM2wz+SsVB7VY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37d5bef4b730abcf9f25c7f937ea67ea_JaffaCakes118
Files
-
37d5bef4b730abcf9f25c7f937ea67ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
998e61d6710cb3a6dd7148e1a6e829e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
LeaveCriticalSection
GetTempPathW
GetComputerNameW
GetHandleInformation
SetConsoleMode
RemoveDirectoryW
PrepareTape
WritePrivateProfileStructA
InitializeCriticalSection
lstrcmpiW
GetFileAttributesA
GetWindowsDirectoryA
PurgeComm
EnumDateFormatsW
GetCommandLineW
CompareStringA
WriteConsoleOutputW
FormatMessageA
SetThreadLocale
GetCurrentProcessId
OutputDebugStringA
CreateProcessA
GetLocaleInfoW
GetFileType
GetConsoleMode
WritePrivateProfileSectionW
CreateMutexA
SetMailslotInfo
IsValidLocale
PeekConsoleInputW
SearchPathW
IsDBCSLeadByteEx
ReadFile
GetTickCount
SetHandleCount
GetDriveTypeW
EnumCalendarInfoW
ReadDirectoryChangesW
GetThreadContext
VirtualAlloc
lstrcpynA
GetEnvironmentStringsW
GetSystemDefaultLangID
GlobalFlags
EnumSystemCodePagesA
SuspendThread
GetPrivateProfileStringA
OutputDebugStringW
GetVolumeInformationW
user32
ClientToScreen
DrawStateA
IsCharLowerA
CallNextHookEx
SetWinEventHook
TranslateMDISysAccel
UnhookWindowsHookEx
CheckMenuItem
SendMessageTimeoutA
MoveWindow
AppendMenuA
DrawTextExA
msvcrt
vfprintf
_mbslwr
_beginthread
_wctime
wcsspn
_mbsupr
freopen
toupper
abort
_spawnvp
iswascii
fseek
_ecvt
_mbsnextc
wctomb
_wcsicoll
_ltoa
_chsize
_tempnam
swprintf
fputc
_ui64tow
strchr
Sections
.text Size: 8KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 152KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ