Static task
static1
Behavioral task
behavioral1
Sample
3b215d15e731f85d2859571e87b991db_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3b215d15e731f85d2859571e87b991db_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3b215d15e731f85d2859571e87b991db_JaffaCakes118
-
Size
149KB
-
MD5
3b215d15e731f85d2859571e87b991db
-
SHA1
3f52bfcf85b5c4deae7da3812fbdd10e088108b6
-
SHA256
1dbdef9c2e7be23df7529c2ccd610785cb5c833542f9f5ac6b6fe5054da88f68
-
SHA512
e7e57d138ff1fa5aa220dcb10d422d48fb9f827b9553f129f40d9b6732aa62d7209cbc4b96be480156f1c58a4a918bda915da85ae8bcaeaacf592d9cf7d800d0
-
SSDEEP
3072:3OXDrK1BA42lEc+3+mSdzintJdVDQ0sJ5x:3OX/K1Cn6cwwzitJdVRsDx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b215d15e731f85d2859571e87b991db_JaffaCakes118
Files
-
3b215d15e731f85d2859571e87b991db_JaffaCakes118.exe windows:5 windows x86 arch:x86
d3db2d4a89a4d506f57c31cf23b0e863
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawIcon
GetScrollInfo
advapi32
RegOpenKeyExW
RegEnumKeyExA
RegQueryValueW
RegQueryInfoKeyW
RegEnumKeyA
kernel32
CompareStringA
HeapFree
ExitProcess
OpenFile
HeapAlloc
CopyFileExA
ReadFile
FlushFileBuffers
GetPriorityClass
lstrcatA
GetFileTime
CreateDirectoryA
GetLastError
GetLocalTime
GetStdHandle
FormatMessageA
lstrcmpA
OpenFileMappingA
GlobalFree
CopyFileA
ExitThread
GetFileType
Sections
.c0eh1 Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.a58f8 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.5bfbf Size: 117KB - Virtual size: 444KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c5561 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ