Static task
static1
Behavioral task
behavioral1
Sample
3b53a014b2c93668603a802387258485_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3b53a014b2c93668603a802387258485_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3b53a014b2c93668603a802387258485_JaffaCakes118
-
Size
36KB
-
MD5
3b53a014b2c93668603a802387258485
-
SHA1
9806bc483891f6ad9e386c52dd8221a682895f5e
-
SHA256
fb70239f6f0a1f2e12baebf1ef1a89d401a1c807bc72f3e9aa8884c24a92c5b8
-
SHA512
e7a905e3fc4704aad72f56c624608bf5df4e70d08b133666c9c579a4465f82711de7e58e695ba78f477047b9978e4e82e9ed7305bee306683686f7bf9e7a4d47
-
SSDEEP
384:JQbYZscwgNhAFOGhZEeylVoEB82SDctso/6+e+zRtVE5FB3Y533u2:i0ZscBCOAbYHacWoC+e+VtVB3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b53a014b2c93668603a802387258485_JaffaCakes118
Files
-
3b53a014b2c93668603a802387258485_JaffaCakes118.exe windows:5 windows x86 arch:x86
9abfc88b7445e15e1c1fc93a8440bbfa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
modemui
CountryRunOnce
drvSetDefaultCommConfigA
InvokeControlPanel
certcli
CAEnumNextCA
CAEnumFirstCA
CADeleteCA
CACloseCertType
CACloseCA
kernel32
GetLongPathNameA
VirtualAllocEx
CreateDirectoryA
GetGeoInfoA
GetStringTypeA
HeapValidate
CompareStringA
CloseHandle
WaitForSingleObject
GetSystemTimeAsFileTime
WriteConsoleA
DeviceIoControl
GetPrivateProfileIntA
UpdateResourceA
FormatMessageA
GetTickCount
GetDateFormatA
GetModuleHandleA
GetProcessId
GetPrivateProfileSectionA
msimg32
AlphaBlend
DllInitialize
TransparentBlt
wtsapi32
WTSEnumerateProcessesA
WTSVirtualChannelQuery
WTSOpenServerW
WTSRegisterSessionNotification
WTSFreeMemory
WTSVirtualChannelOpen
WTSLogoffSession
WTSUnRegisterSessionNotification
WTSEnumerateServersA
WTSSendMessageA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ