Static task
static1
Behavioral task
behavioral1
Sample
3891b1cbb7cfe7654f5cd592246a3bb2_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3891b1cbb7cfe7654f5cd592246a3bb2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3891b1cbb7cfe7654f5cd592246a3bb2_JaffaCakes118
-
Size
10KB
-
MD5
3891b1cbb7cfe7654f5cd592246a3bb2
-
SHA1
a87409369dabf7935232380b5afa76aff253fbd2
-
SHA256
7dbe59f41f689fdb2ff6d48d7f5e24d2ce7e474ece4b1c0c6479f3d742bdc0c4
-
SHA512
4c62870ba5b55f1e3c1c2d58ff6c4540eb57d34347ed95f37536175d734c4dd177d639e9ecedbecf8030b2b9a32aaf345450c0a3c6310e77ae38e81b02106168
-
SSDEEP
192:vh5lhyqkF4TzcnFsQaBa0QCJja40QAOI/rrVqdE3eR4ryU:8+/cFf8hJjaE2/Pv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3891b1cbb7cfe7654f5cd592246a3bb2_JaffaCakes118
Files
-
3891b1cbb7cfe7654f5cd592246a3bb2_JaffaCakes118.exe windows:4 windows x86 arch:x86
3cb51f85d091baf3efd8016c02dbd837
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetTopWindow
MessageBoxA
DialogBoxParamA
LoadIconA
ArrangeIconicWindows
CharUpperA
GetClassLongA
IsIconic
SetFocus
CharNextA
FlashWindow
RegisterWindowMessageA
ShowWindow
LoadCursorA
UpdateWindow
EnableWindow
SetCursorPos
CharLowerA
KillTimer
GetSysColorBrush
SetTimer
ShowCursor
GetMessagePos
SetWindowTextA
ReleaseDC
GetParent
kernel32
GetConsoleCP
lstrlenA
GlobalDeleteAtom
lstrcatA
SetLastError
LoadLibraryA
GlobalAddAtomA
GetProcAddress
FreeLibrary
GlobalFindAtomA
Sleep
GetCommandLineA
GetConsoleOutputCP
FindResourceA
AllocConsole
CopyFileA
GetLastError
shell32
DragFinish
ShellAboutA
gdi32
GdiFlush
SetBkMode
CreateCompatibleDC
GetObjectA
GdiGetBatchLimit
SelectObject
DeleteDC
DeleteObject
EndPage
CreateSolidBrush
ole32
CoFreeUnusedLibraries
CoFreeAllLibraries
CoGetCurrentProcess
comctl32
InitCommonControls
FlatSB_ShowScrollBar
MakeDragList
FlatSB_GetScrollPos
DrawInsert
FlatSB_GetScrollRange
FlatSB_GetScrollProp
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ