Static task
static1
Behavioral task
behavioral1
Sample
3a325224c1124faf9ee905f152c20309_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3a325224c1124faf9ee905f152c20309_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3a325224c1124faf9ee905f152c20309_JaffaCakes118
-
Size
1.1MB
-
MD5
3a325224c1124faf9ee905f152c20309
-
SHA1
98731364b055a9c6cdf69ef495af10c1c8d3d9b5
-
SHA256
6cb91b70b5c2daab9359cba21efd00c318e8187736cc45b69ef157c72cb6ad74
-
SHA512
8a785197df53799dd626f15051ed30ea0042aad020d77b5f0b3d9fe15b643ba31d9e365f29c10561d9e27b0ce30b6fd9bdc2e09790ad815da9c72469486f19f6
-
SSDEEP
24576:qIhbBSCjuk288erexWg9c2fNwt9OoH7au:qIWCj+erkW52laOob7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a325224c1124faf9ee905f152c20309_JaffaCakes118
Files
-
3a325224c1124faf9ee905f152c20309_JaffaCakes118.exe windows:4 windows x86 arch:x86
85d8cf3b252bed0532b9dd197b0dff1a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualFree
GetStringTypeW
GetProcAddress
GetModuleHandleA
VirtualAlloc
OutputDebugStringA
ExitProcess
advapi32
LogonUserA
ElfClearEventLogFileW
CryptDecrypt
SetSecurityDescriptorGroup
setupapi
SetupAddSectionToDiskSpaceListA
SetupGetBackupInformationA
SetupQueryInfVersionInformationA
SetupFindFirstLineA
user32
GetProcessWindowStation
GetQueueStatus
OemToCharBuffA
OemToCharW
RegisterClassExW
GetNextDlgTabItem
UnionRect
UnregisterHotKey
VkKeyScanExW
CharLowerBuffA
GetMouseMovePointsEx
FindWindowW
EnumWindows
RegisterClipboardFormatA
CharPrevA
EnumChildWindows
msvcrt
wcslen
printf
exit
__set_app_type
__p__commode
__getmainargs
Sections
.text Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 636KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rata Size: 392KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE