Static task
static1
Behavioral task
behavioral1
Sample
3a0ff3aa3b32e6d43f5c3b47db3fb744_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3a0ff3aa3b32e6d43f5c3b47db3fb744_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3a0ff3aa3b32e6d43f5c3b47db3fb744_JaffaCakes118
-
Size
102KB
-
MD5
3a0ff3aa3b32e6d43f5c3b47db3fb744
-
SHA1
afb37a88ccbe91f011e4697bde1d63d0cddee2b0
-
SHA256
9084545b637c4ca6cf6ba01a570cfda3d5caee1114e79d8d7e1e389ed9bc8cfe
-
SHA512
e962791b7662ccfe894eb27c790875c5a133fddce5381a54a907977ff95f2b0da995871add9f25d169ae94a127003a533ba8f9cfde3430b8d964191d54f5ee90
-
SSDEEP
1536:r0I82B25QOCBdxl+Vp8Jsp1Zn5B/181YRR2jbKlSwx2q4tt:rDXgul+AJg1BN8MR2julSwsq4tt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a0ff3aa3b32e6d43f5c3b47db3fb744_JaffaCakes118
Files
-
3a0ff3aa3b32e6d43f5c3b47db3fb744_JaffaCakes118.exe windows:5 windows x86 arch:x86
328c0bed7131a91d0a7cb86c26acc857
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
certcli
CAAddCACertificateType
CACertTypeSetSecurity
CACertTypeGetSecurity
CACloseCertType
CAGetCertTypeKeySpec
CAGetCertTypePropertyEx
CARemoveCACertificateType
CASetCertTypeKeySpec
CAUpdateCertType
CAFreeCertTypeProperty
CAGetCAProperty
CAFindByName
CAGetCertTypeFlags
CASetCertTypeFlags
CAFreeCAProperty
CASetCertTypeProperty
CAFreeCertTypeExtensions
CAEnumCertTypesForCA
CAEnumCertTypes
CACloseCA
CAUpdateCA
CAFindCertTypeByName
CAGetCertTypeProperty
CAGetCertTypeExtensions
CASetCertTypeExtension
CACreateCertType
CAEnumNextCertType
msvcrt
??3@YAXPAX@Z
mbstowcs
wcsstr
malloc
wcschr
_except_handler3
wcscat
?terminate@@YAXXZ
free
__RTDynamicCast
wcslen
_wcsicmp
wcsrchr
wcscmp
_onexit
??1type_info@@UAE@XZ
_initterm
_wcsupr
vswprintf
memmove
??2@YAPAXI@Z
__dllonexit
_adjust_fdiv
wcscpy
wcstoul
kernel32
InterlockedIncrement
LocalFree
FileTimeToSystemTime
GetModuleFileNameW
GlobalFree
OutputDebugStringA
lstrcpyW
CloseHandle
GetComputerNameW
lstrcmpiW
GetCurrentProcess
GetStartupInfoA
GetCPInfo
GetModuleHandleA
GetLastError
GetProcAddress
OutputDebugStringW
RemoveDirectoryA
CreateFileW
GetSystemTimeAsFileTime
QueryPerformanceCounter
SetLastError
WideCharToMultiByte
GlobalLock
GetDateFormatW
LoadLibraryW
SetUnhandledExceptionFilter
FormatMessageW
LocalReAlloc
GlobalAlloc
GetSystemWindowsDirectoryW
InterlockedDecrement
lstrlenW
GetEnvironmentStringsW
GetTickCount
InitializeCriticalSection
GlobalUnlock
IsBadReadPtr
FileTimeToLocalFileTime
GetSystemDefaultLangID
DeleteCriticalSection
user32
SendMessageW
LoadImageW
LoadIconW
GetDlgItemTextA
PostMessageW
WinHelpW
GetWindowLongW
MessageBoxW
SystemParametersInfoW
EnableWindow
GetDlgItem
SetFocus
SetWindowLongW
wsprintfW
EndDialog
DialogBoxParamW
InsertMenuItemW
LoadBitmapW
LoadCursorW
RegisterClipboardFormatW
SetDlgItemTextW
SetWindowTextW
SetCursor
GetParent
LoadStringW
GetDC
SendDlgItemMessageW
ReleaseDC
advapi32
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW
comctl32
CreatePropertySheetPageW
PropertySheetW
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ