Static task
static1
Behavioral task
behavioral1
Sample
3aa36bcebbb450f201cdc02e63eaadf5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3aa36bcebbb450f201cdc02e63eaadf5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3aa36bcebbb450f201cdc02e63eaadf5_JaffaCakes118
-
Size
7.5MB
-
MD5
3aa36bcebbb450f201cdc02e63eaadf5
-
SHA1
3cffac2700e0e557d9d01070672d02fde6f8d6ac
-
SHA256
b462d563a5df243ca748d24318cfa272003bd26c15bf553d49c881dff60825ad
-
SHA512
2d5d9db24572be5a560d6fb380054f33b55177b4209fcae08d9afb7a5f545b087cfe31b47d04f3afdda04987503970cb3659967c159d3bedb16bd84d0db2f49e
-
SSDEEP
196608:9ry7deocpy9QmtX74j2JjbhA7oYrm1xm3zlz:9rykoIy9Ejg69rm10Dp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3aa36bcebbb450f201cdc02e63eaadf5_JaffaCakes118
Files
-
3aa36bcebbb450f201cdc02e63eaadf5_JaffaCakes118.exe windows:5 windows x86 arch:x86
7ec2e1e46b0f3347e37858dacee658e7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
WaitForSingleObject
GetCurrentThreadId
WriteFile
InterlockedIncrement
InterlockedDecrement
CreateThread
lstrlenW
GetProcAddress
GetModuleHandleW
lstrcmpiW
CreateDirectoryW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
RemoveDirectoryW
CopyFileW
CreateHardLinkW
GetExitCodeProcess
GetCommandLineW
LockResource
GetCurrentProcess
GetStringTypeW
LCMapStringW
GetConsoleMode
GetConsoleCP
GetFileAttributesW
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
Sleep
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
FlushInstructionCache
DeleteFileW
CreateFileW
SetLastError
SetFilePointer
ReadFile
CloseHandle
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
FlushFileBuffers
UnhandledExceptionFilter
HeapCreate
ExitProcess
RtlUnwind
WriteConsoleW
GetStartupInfoW
HeapSetInformation
EncodePointer
LoadLibraryW
RaiseException
FormatMessageW
LocalFree
WideCharToMultiByte
VirtualAlloc
VirtualFree
GetStdHandle
GetTickCount
InterlockedCompareExchange
InterlockedPushEntrySList
HeapFree
GetProcessHeap
HeapAlloc
IsProcessorFeaturePresent
InterlockedPopEntrySList
HeapReAlloc
DecodePointer
user32
UnregisterClassA
SetDlgItemTextA
GetSystemMetrics
LoadImageW
ShowWindow
EndDialog
GetParent
GetWindow
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints
SetWindowPos
EnableWindow
PostMessageW
GetDlgItem
SetDlgItemTextW
SendDlgItemMessageW
GetDlgItemTextW
GetWindowLongW
DefWindowProcW
MessageBoxW
GetActiveWindow
SendMessageW
DialogBoxParamW
DestroyWindow
CharNextW
SetWindowLongW
GetWindowRect
gdi32
CreateFontW
advapi32
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCloseKey
RegCreateKeyExW
shell32
ShellExecuteW
ShellExecuteExW
CommandLineToArgvW
SHGetPathFromIDListW
SHBrowseForFolderW
ole32
CoInitialize
CoUninitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
Sections
.text Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ