Static task
static1
Behavioral task
behavioral1
Sample
3a5199434dd6c3f520e3c6d2139f70b7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a5199434dd6c3f520e3c6d2139f70b7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3a5199434dd6c3f520e3c6d2139f70b7_JaffaCakes118
-
Size
116KB
-
MD5
3a5199434dd6c3f520e3c6d2139f70b7
-
SHA1
aaaf912e809b49ba678682b2ebccb35f7ddae251
-
SHA256
6627fc694d3da327d827a17f46185dc60b5acbf02dadbb2a1072eb6a4febe8de
-
SHA512
0898a42443f1c354fab1fdbb646d31a8637028a5ece57e1c84cc73fcf1ccb9dd1f43540d7f79938ad671ac436c20ac8d213cfe9d3234182e55c1523004216d2d
-
SSDEEP
768:Xftymd05xYjujeSkoXM1KLcbDZnpjh9dTIRWG50ynoMMt2qa4MeOrCaNzfWv:lymyTYjOe1F3JGRoFtOrCaNzWv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a5199434dd6c3f520e3c6d2139f70b7_JaffaCakes118
Files
-
3a5199434dd6c3f520e3c6d2139f70b7_JaffaCakes118.exe windows:1 windows x86 arch:x86
9d7ba95e61807924469b514bbcef7487
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
HeapFree
GetACP
GetStartupInfoA
HeapAlloc
LoadLibraryW
GetModuleFileNameA
SetLastError
ExitProcess
QueryPerformanceCounter
UnhandledExceptionFilter
GetStartupInfoW
TerminateProcess
LoadLibraryA
InterlockedDecrement
GetProcAddress
DeleteCriticalSection
lstrcpyW
EnterCriticalSection
GetModuleHandleW
EnterCriticalSection
GetCurrentProcessId
HeapFree
SetUnhandledExceptionFilter
CreateThread
Sections
.bvrv Size: 102KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ckld Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wtne Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oarq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tlqp Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oyax Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mixt Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mcwr Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nkeh Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE