Static task
static1
Behavioral task
behavioral1
Sample
3a4fd97909df7a79692cefd101ad9476_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a4fd97909df7a79692cefd101ad9476_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3a4fd97909df7a79692cefd101ad9476_JaffaCakes118
-
Size
5.4MB
-
MD5
3a4fd97909df7a79692cefd101ad9476
-
SHA1
9498a69dca9da60bbcf025afa7033d0dd10af26f
-
SHA256
78e2531060e3dc80aa67797fd40b119b07820634dec521800c63757a8db0d082
-
SHA512
f63d3ff79890a6d7083d0d6c37a173805a225f2475cf4c5cc719d715ad9e98e6ad09090bd921122eb1c38d3c355e5a2f8f2cfc110740140640305882caaef2c0
-
SSDEEP
98304:N9DzUkptPXZhI93dAV9aqUG9wu7O4Wv66zJFWPVaEkQXC5odUqPe3/3/:fzDpVXZCE9aK9wu6O2MdaKXCKdUqW//
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a4fd97909df7a79692cefd101ad9476_JaffaCakes118
Files
-
3a4fd97909df7a79692cefd101ad9476_JaffaCakes118.exe windows:4 windows x86 arch:x86
123eff1e1addc96ec6adf7041cddd2c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetProcAddress
RaiseException
MultiByteToWideChar
GetACP
GetCurrentProcess
LoadLibraryExW
GetFileSize
WideCharToMultiByte
TlsFree
GetOEMCP
SetEvent
HeapDestroy
CancelIo
WriteFile
GetEnvironmentStrings
ExitProcess
SystemTimeToFileTime
SetFilePointer
OutputDebugStringA
GetModuleHandleA
DeleteFileW
GetStringTypeA
GetStartupInfoA
user32
CopyRect
KillTimer
GetWindowLongA
ScreenToClient
GetWindowLongW
CallWindowProcW
PeekMessageW
TranslateMessage
DestroyMenu
EnableMenuItem
IsWindowEnabled
ReleaseDC
ShowWindow
SetWindowTextW
SetDlgItemTextW
SetWindowPos
FillRect
MsgWaitForMultipleObjects
CreateWindowExW
GetDesktopWindow
advapi32
GetAce
FlushTraceW
UpdateTraceW
CloseTrace
IsValidSid
SetThreadToken
ControlService
AdjustTokenPrivileges
GetSidIdentifierAuthority
CryptExportKey
FreeSid
CopySid
RegEnumValueA
SetSecurityDescriptorOwner
RegDeleteValueA
RegDeleteKeyW
RegCreateKeyW
StopTraceW
StartServiceW
RegConnectRegistryW
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
Sections
.b Size: 4.4MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 297KB - Virtual size: 403KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 622KB - Virtual size: 622KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ