Static task
static1
Behavioral task
behavioral1
Sample
3bc5ea4ab3929182c1dbecbbc419ea0b_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3bc5ea4ab3929182c1dbecbbc419ea0b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3bc5ea4ab3929182c1dbecbbc419ea0b_JaffaCakes118
-
Size
170KB
-
MD5
3bc5ea4ab3929182c1dbecbbc419ea0b
-
SHA1
b576d2ca375459cff76512fb29da01166b451d2c
-
SHA256
ef332f2eb832239bbf66dc1670408710b0e305c6c50864461ebb4e2587ed6f71
-
SHA512
2ef0d7aba7ea6561b55830de5f226a250c70b1e14f719d1b35c2b96dfa6b6fdf79e43edaee71f179b4c90ef5f4f34d66125f18c58c9fae4a8ec39cf2eb835a05
-
SSDEEP
1536:xuLyd9yXKYjemJVPN25xzFCvd7AxjDoJ2dvMaaK9o4lp6s9Txwcy4J+OGEYKL7bc:xuae/JVPY59FCK5JuK9o4z1MC19Qwk3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bc5ea4ab3929182c1dbecbbc419ea0b_JaffaCakes118
Files
-
3bc5ea4ab3929182c1dbecbbc419ea0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
4133dc14a2cfa824ad4a0ed6f4533758
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoUnmarshalInterface
StringFromIID
CoTaskMemFree
CLSIDFromProgID
CoRegisterClassObject
CreateOleAdviseHolder
comctl32
ImageList_DrawEx
ImageList_Read
ImageList_GetBkColor
ImageList_Add
ImageList_Write
ImageList_Draw
ImageList_Create
ImageList_DragShowNolock
ImageList_Remove
oleaut32
VariantChangeType
version
VerFindFileA
GetFileVersionInfoA
GetFileVersionInfoSizeA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
FindTextA
FindTextA
gdi32
GetDIBColorTable
SetPixel
GetBitmapBits
CopyEnhMetaFileA
GetBitmapBits
BitBlt
CreateDIBSection
GetDIBits
CreateCompatibleDC
GetObjectA
user32
RegisterWindowMessageA
GetLastActivePopup
EnumChildWindows
msvcrt
pow
_acmdln
memmove
sqrt
cos
atan
wcscspn
abs
memcmp
wcstol
kernel32
GetProcAddress
LoadLibraryExA
LoadLibraryA
IsBadReadPtr
GetOEMCP
ExitThread
ExitProcess
VirtualAlloc
GetCommandLineA
GetACP
VirtualAllocEx
GetModuleHandleA
GetModuleHandleW
advapi32
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegEnumKeyExA
shell32
SHGetFolderPathA
SHGetFileInfoA
SHGetDesktopFolder
DragQueryFileA
SHGetDiskFreeSpaceA
SHGetFolderPathA
shlwapi
SHQueryInfoKeyA
PathIsDirectoryA
SHQueryValueExA
SHDeleteKeyA
SHSetValueA
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 783B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data8 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 225B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data3 Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data7 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ