Static task
static1
Behavioral task
behavioral1
Sample
3a2d9dd2e68ce95fec4647de46f9b6df_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a2d9dd2e68ce95fec4647de46f9b6df_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3a2d9dd2e68ce95fec4647de46f9b6df_JaffaCakes118
-
Size
227KB
-
MD5
3a2d9dd2e68ce95fec4647de46f9b6df
-
SHA1
6c3f4dd7a1d637c3e796ce238bcbb18123bf6cdc
-
SHA256
11d81a1719672af6f2f23583fc0cd6aea81a3f13c9c43a031a647574008d077f
-
SHA512
0de912164a1e38e3481d46aa85879fd52842bf5f9404afecdc4fe5d7b2899b8ad07baf1cb13d448b71f013f16dc0c23aa5cb674d25e1ae5763312e845fe51d32
-
SSDEEP
6144:1MFtNPycKybVniKxp7CbrtJkgRhAYaR3oPV/zvi3JXz1Pq:+Px3YBR6Yv/Ti35pPq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a2d9dd2e68ce95fec4647de46f9b6df_JaffaCakes118
Files
-
3a2d9dd2e68ce95fec4647de46f9b6df_JaffaCakes118.exe windows:4 windows x86 arch:x86
2b977f91b119ff5fd76c7f1a8f704199
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
user32
CopyRect
SetForegroundWindow
SetRect
GetDC
GetWindowRect
ShowWindow
GetLastActivePopup
EnumWindowStationsA
GetClientRect
ReleaseDC
DrawIcon
GetSystemMetrics
IsIconic
TranslateMessage
kernel32
WaitForSingleObject
GetSystemDirectoryA
GetCurrentThreadId
GetProcessHeap
LoadLibraryA
DeleteCriticalSection
GetFileSize
GetStartupInfoW
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetModuleFileNameA
ExitProcess
ExitProcess
SetLastError
GetLastError
InitializeCriticalSection
CloseHandle
GetWindowsDirectoryA
GetTickCount
GetSystemDefaultLangID
GetVersionExA
CompareStringA
FreeLibrary
QueryPerformanceCounter
InterlockedExchange
Sections
.text Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.strings Size: 5KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ