Static task
static1
Behavioral task
behavioral1
Sample
3b8818ab59f58c4841c9a610591b0282_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3b8818ab59f58c4841c9a610591b0282_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3b8818ab59f58c4841c9a610591b0282_JaffaCakes118
-
Size
275KB
-
MD5
3b8818ab59f58c4841c9a610591b0282
-
SHA1
017cd01a230c3c47d2b5b8a60eeffa16a4b49b66
-
SHA256
5e42d581c57890d9b72cde4df0dfc39e7118990eca73a3dbbd2b317fc8478bf2
-
SHA512
b5fe88c4f7adfc96132bfa375483ed6026f4262f400b6823476782cb0df935184bcef71dea9438caa5b6d96b670b4049efb49996cfa08bbdd597c7711d58521c
-
SSDEEP
6144:5N0p6QL81oCFNH9CMd0tS6elMgWUib5Fl:Ta2tdP6elMOI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b8818ab59f58c4841c9a610591b0282_JaffaCakes118
Files
-
3b8818ab59f58c4841c9a610591b0282_JaffaCakes118.exe windows:4 windows x86 arch:x86
10a1fdde3470b40b7676ba6fce247bff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateThread
EnterCriticalSection
ExitThread
FreeLibrary
GetCommandLineA
GetCurrentThreadId
GetFileAttributesA
GetFileSize
GetLocalTime
GetModuleFileNameA
GetTickCount
GlobalAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalFree
LocalReAlloc
MulDiv
SetEvent
SetThreadPriority
Sleep
TerminateThread
WaitForSingleObject
WriteConsoleA
lstrlenA
user32
CreatePopupMenu
CreateWindowExW
DefWindowProcW
EnumDisplaySettingsA
GetCursorPos
GetWindow
GetWindowThreadProcessId
InsertMenuItemW
KillTimer
MessageBoxW
MoveWindow
PtInRect
RegisterWindowMessageW
SendDlgItemMessageW
SendMessageTimeoutW
SetWindowPos
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 259KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ