Static task
static1
Behavioral task
behavioral1
Sample
3bffe96ea84354baa7039c90184f70c7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3bffe96ea84354baa7039c90184f70c7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3bffe96ea84354baa7039c90184f70c7_JaffaCakes118
-
Size
208KB
-
MD5
3bffe96ea84354baa7039c90184f70c7
-
SHA1
b19216b1d2b2fbf8017ad0ebf3d3cf5d761b0327
-
SHA256
dec683eb1d33691006addcaa0b508ea005c2aef634faba086990e375e648e270
-
SHA512
077dd92e5aa3c43c1e23d4ce919a0781c7a4ead77db78fa651dd7d1dd5f0c5e265b1fb802f8af1627a1669fd03b01cab00357fbffbebf1d3ca1958263be59690
-
SSDEEP
6144:3xCdLNX8bqAgeS4pQxgFOiQGA/y9aTyylxkbtx62q:3IFNX8bqBHaoGA6IyylxkbuN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bffe96ea84354baa7039c90184f70c7_JaffaCakes118
Files
-
3bffe96ea84354baa7039c90184f70c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
e18efc512b47ccd44504f8c4e760b87e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawIconEx
GetDC
GetFocus
GetCursor
EnumChildWindows
EnableWindow
GetDesktopWindow
EqualRect
DrawMenuBar
GetCursorPos
GetClassInfoA
DrawTextA
FindWindowA
FillRect
GetClassNameA
GetClipboardData
GetActiveWindow
EndPaint
FrameRect
EmptyClipboard
EnumThreadWindows
GetClassLongA
GetClientRect
GetDlgItem
EnableMenuItem
EnumWindows
GetDCEx
EnableScrollBar
GetCapture
GetForegroundWindow
shell32
SHGetSpecialFolderLocation
SHGetFolderPathA
Shell_NotifyIconA
SHGetDiskFreeSpaceA
shlwapi
SHQueryValueExA
ole32
CreateStreamOnHGlobal
CoUninitialize
StringFromIID
OleCreateStaticFromData
CoGetContextToken
CLSIDFromString
GetHGlobalFromStream
CoRevokeClassObject
gdi32
RestoreDC
GetClipBox
CreateCompatibleDC
CreateDIBSection
GetObjectA
GetDCOrgEx
GetRgnBox
SaveDC
CreateFontIndirectA
GetDIBColorTable
SetBkMode
CreatePalette
CreateDIBitmap
BitBlt
CreatePenIndirect
SetPixel
SelectPalette
GetDIBits
GetPixel
CreateCompatibleBitmap
CopyEnhMetaFileA
CreateBrushIndirect
GetCurrentPositionEx
GetPaletteEntries
SetBkColor
SetTextColor
CreateBitmap
GetBitmapBits
SelectObject
LineTo
kernel32
GlobalDeleteAtom
GetProcessHeap
HeapFree
RaiseException
ExitProcess
LoadResource
GetModuleFileNameA
lstrlenW
GetVersionExA
GetLocaleInfoA
GetStdHandle
GetStartupInfoA
GetVersion
GlobalAddAtomA
GetLocalTime
LocalAlloc
VirtualAlloc
GetProcAddress
LoadLibraryExA
LoadLibraryA
LockResource
VirtualAllocEx
GetOEMCP
GetSystemDefaultLangID
HeapAlloc
GlobalAlloc
IsBadReadPtr
GlobalFindAtomA
ExitThread
lstrlenA
InitializeCriticalSection
GetStringTypeA
GetTickCount
GetModuleHandleA
GetUserDefaultLCID
GetLastError
GetThreadLocale
GetStringTypeW
version
VerInstallFileA
VerQueryValueA
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc8 Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc0 Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc6 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ