Static task
static1
Behavioral task
behavioral1
Sample
3a104a8c50585cd3a555845b389f4466_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3a104a8c50585cd3a555845b389f4466_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3a104a8c50585cd3a555845b389f4466_JaffaCakes118
-
Size
1.3MB
-
MD5
3a104a8c50585cd3a555845b389f4466
-
SHA1
cddf3a8ea3794cc8885aa31b9658bf6feae033ac
-
SHA256
74906f9b9076189866f01cd71fd543783bf5b79e3b66ff8d0d116abc83bb36db
-
SHA512
0a4374637a6bc650c1c3b2ab7910a3128006e2ca26b963b5daca54fd5bb0bc69806a0d378c5e49a00ab04c97b405b55684c709ae7a13c4dcb0cfecfddbc1452a
-
SSDEEP
24576:TXw97IgsHLAfqr39wRDm5XyX6TmALs3EGJWklRRGg3tjD1nkV114254jwzugG4bD:rT1oqruXmGJWkEetjDBS14254xgbr/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a104a8c50585cd3a555845b389f4466_JaffaCakes118
Files
-
3a104a8c50585cd3a555845b389f4466_JaffaCakes118.exe windows:4 windows x86 arch:x86
8f118b7dfe693f4b73eb5b57164045ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamStop
ws2_32
inet_ntoa
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
kernel32
FileTimeToLocalFileTime
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
GetSysColorBrush
MessageBoxA
gdi32
GetPolyFillMode
winspool.drv
DocumentPropertiesA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CoRevokeClassObject
oleaut32
SafeArrayAccessData
comctl32
ImageList_Destroy
oledlg
ord8
Sections
.text Size: - Virtual size: 506KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.������0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.������1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ