Static task
static1
Behavioral task
behavioral1
Sample
3a6c3bbead51ca34b51efd6b522534b0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3a6c3bbead51ca34b51efd6b522534b0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3a6c3bbead51ca34b51efd6b522534b0_JaffaCakes118
-
Size
182KB
-
MD5
3a6c3bbead51ca34b51efd6b522534b0
-
SHA1
69c25f316343730404436b26ce1f4eae958d20a3
-
SHA256
db3b0c44f63c2791bfe786a5d8ebcbee6f0e15ed318e4b07b5342c48f9b12f5d
-
SHA512
456c1bb85f332f3548da59effbd30b18614c956297e583de2ab3237d7edec5287069dc3369d224bcd09eecf7c505a36cf742f29ba3316678ab2e679b1321b3c3
-
SSDEEP
3072:LMT+2Pzzwyuda6pWdUuWB2l3Grw5zXNCvV1zkvpjaN2YvzSY/0gee8PNj/PEI+nJ:QT+izW9BHsG+peUK0m8PdPE7p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a6c3bbead51ca34b51efd6b522534b0_JaffaCakes118
Files
-
3a6c3bbead51ca34b51efd6b522534b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
61e2171aa08be89e461c4b85b76facf2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameA
GetFileInformationByHandle
GetModuleFileNameA
LocalAlloc
SetEnvironmentVariableA
VirtualAlloc
GetVersion
ExitProcess
lstrcatA
OutputDebugStringA
GetModuleFileNameW
ReleaseMutex
GetACP
LocalSize
user32
ReleaseDC
CharPrevExA
PostMessageW
PeekMessageA
CharPrevA
wsprintfA
GetParent
SetTimer
GetSysColorBrush
CharNextA
DefWindowProcA
GetClientRect
GetDlgItemInt
LoadCursorW
CharNextExA
GetWindowRect
LoadStringW
IsCharLowerA
ShowWindow
SetWindowTextW
GetDlgItemTextA
CreateWindowExW
GetDlgItem
GetFocus
DialogBoxParamW
SetCursor
PostQuitMessage
GetWindowLongW
SetDlgItemTextA
InvalidateRect
GetDesktopWindow
GetSystemMetrics
EnableWindow
SetWindowTextA
GetWindowLongA
GetDC
SetWindowPos
PeekMessageW
LoadIconA
SetWindowLongA
DialogBoxParamA
TranslateMessageEx
TranslateMessage
IsChild
gdi32
GetBkMode
GetBkColor
GetBitmapBits
CreateFontA
EnumFontsW
OffsetClipRgn
IntersectClipRect
FillRgn
SetBoundsRect
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ