Static task
static1
Behavioral task
behavioral1
Sample
3b2f3023cf698344b5a04661621812c1_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3b2f3023cf698344b5a04661621812c1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3b2f3023cf698344b5a04661621812c1_JaffaCakes118
-
Size
157KB
-
MD5
3b2f3023cf698344b5a04661621812c1
-
SHA1
302bfbe5f5076f1fb8aeaf06497885554a1871cc
-
SHA256
d8e6e1ec32b27a9667c3f7113f985da8b650da158905f229c4b7fbdce797de3f
-
SHA512
d026d9b36aec5fbc0d42a3f8a6cd23a8b15a2ab1488f4690f9e383c8b19164fc0e9665751f96b0c01338b893abbaed0aa8224ef4b8fc45088dd1d8ab5e7bc0c7
-
SSDEEP
3072:jTMGwQb3Ag+X64sRnQFAKZyHW2uIkB30nt2T8IJtoRy7zLN4:Dwx/5AE2uTq0tJ3zh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b2f3023cf698344b5a04661621812c1_JaffaCakes118
Files
-
3b2f3023cf698344b5a04661621812c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
188521e2403ed862568ac4433a7e2077
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareStringA
CopyFileA
CreateDirectoryA
CreateEventA
CreateEventW
CreateFileMappingA
CreateFileW
DeleteFileA
DisableThreadLibraryCalls
DuplicateHandle
EnterCriticalSection
EnumCalendarInfoA
ExitProcess
FileTimeToDosDateTime
FileTimeToSystemTime
FindNextFileW
FindResourceA
FormatMessageA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeResource
GetACP
GetCommandLineW
GetConsoleMode
GetCurrentProcessId
GetCurrentThread
GetDiskFreeSpaceA
GetDriveTypeA
GetExitCodeProcess
GetFileAttributesA
GetFileSize
GetFileType
GetFullPathNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStartupInfoA
GetStringTypeA
GetStringTypeExA
GetStringTypeW
GetSystemDefaultLCID
GetSystemInfo
GetSystemTime
GetTempPathA
GetThreadLocale
GetVersionExA
GetVersionExW
GetWindowsDirectoryA
GlobalAlloc
HeapDestroy
HeapReAlloc
InterlockedExchange
IsBadReadPtr
IsBadWritePtr
IsDebuggerPresent
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryW
LocalFileTimeToFileTime
MapViewOfFile
MultiByteToWideChar
OutputDebugStringA
ReleaseMutex
SetCurrentDirectoryA
SetEnvironmentVariableA
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SizeofResource
Sleep
TlsAlloc
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteConsoleA
WritePrivateProfileStringA
lstrcmpiW
user32
CallWindowProcA
CharNextA
CheckMenuItem
ClientToScreen
CreateMenu
DefWindowProcA
DeleteMenu
DestroyIcon
DrawEdge
DrawFrameControl
DrawIcon
DrawMenuBar
EmptyClipboard
EqualRect
FillRect
GetActiveWindow
GetClassInfoA
GetClientRect
GetDlgItem
GetFocus
GetKeyState
GetLastActivePopup
GetMenuItemCount
GetMenuState
GetMessageA
GetMessagePos
GetScrollInfo
GetScrollPos
GetScrollRange
GetSysColorBrush
GetSystemMenu
GetTopWindow
GetWindowDC
GetWindowTextA
InsertMenuA
IsDialogMessageA
IsRectEmpty
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapA
LoadIconA
OpenClipboard
PeekMessageA
RedrawWindow
RegisterClipboardFormatA
ReleaseCapture
RemoveMenu
SendDlgItemMessageA
SetActiveWindow
SetClassLongA
SetClipboardData
SetFocus
SetMenu
SetPropA
SetRect
SetScrollPos
SetWindowLongA
SetWindowPos
SetWindowTextA
SetWindowsHookExA
ShowCursor
ShowOwnedPopups
ShowWindow
UpdateWindow
gdi32
AbortDoc
BeginPath
BitBlt
CloseEnhMetaFile
CombineRgn
CreateDIBSection
CreateDIBitmap
CreateEllipticRgn
CreateFontIndirectA
CreateHalftonePalette
CreateHatchBrush
CreateRectRgnIndirect
DPtoLP
EndDoc
EnumEnhMetaFile
EnumFontFamiliesW
GetBitmapBits
GetBkColor
GetBkMode
GetClipBox
GetClipRgn
GetEnhMetaFilePaletteEntries
GetMapMode
GetPaletteEntries
GetRegionData
GetRgnBox
GetStretchBltMode
GetTextAlign
GetTextCharsetInfo
GetTextExtentExPointW
OffsetClipRgn
PatBlt
Pie
PolyDraw
PtInRegion
RealizePalette
RectInRegion
SaveDC
SetBkColor
SetDIBColorTable
SetDIBits
SetEnhMetaFileBits
SetGraphicsMode
SetMapMode
SetRectRgn
SetTextAlign
StartDocW
StretchBlt
StrokeAndFillPath
TextOutA
UnrealizeObject
shell32
CommandLineToArgvW
DragAcceptFiles
ExtractIconExA
ExtractIconExW
SHBrowseForFolderA
SHCreateDirectoryExA
SHCreateDirectoryExW
SHGetFileInfo
SHGetFileInfoW
SHGetPathFromIDList
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE