Static task
static1
Behavioral task
behavioral1
Sample
3b6164bb23000b1dc8dc9d0b009018f0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3b6164bb23000b1dc8dc9d0b009018f0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3b6164bb23000b1dc8dc9d0b009018f0_JaffaCakes118
-
Size
244KB
-
MD5
3b6164bb23000b1dc8dc9d0b009018f0
-
SHA1
17c41f7fb7c7e0889a612af6dab19e229cb27e71
-
SHA256
e67a3739c77f8228fb2e0d4e1529112bacc1c0eed0c0d2c77b977e51b5dd2090
-
SHA512
66fe8de94abe0c1095b0776b907f13d6d39aa2b610cc3ef54e2aac0d9b5cec5c4af7772651bd95d0afa6ed053d6ba0940f66cfd55b9f284e0c511436009c7fdd
-
SSDEEP
6144:8XShHx2eBgSl1MoUqoI0h3ySLljXNkPIZp:/hHUeBnUqQVLJp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b6164bb23000b1dc8dc9d0b009018f0_JaffaCakes118
Files
-
3b6164bb23000b1dc8dc9d0b009018f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
fa5f50019e1a7f98dad3718684e43c37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileA
FlushFileBuffers
SetEnvironmentVariableA
CompareStringW
GetTimeZoneInformation
GetSystemTime
GetLocalTime
WideCharToMultiByte
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
GetLastError
SetFilePointer
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CompareStringA
CloseHandle
advapi32
RegOpenKeyExA
RegCloseKey
shlwapi
PathFileExistsA
SHDeleteKeyA
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 212KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE