?JHFjhkfjlKLUJFiufiOUuifHLFJHlffgdgf@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
3c09ea6035daa67319cbbe500dc763f8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3c09ea6035daa67319cbbe500dc763f8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3c09ea6035daa67319cbbe500dc763f8_JaffaCakes118
-
Size
256KB
-
MD5
3c09ea6035daa67319cbbe500dc763f8
-
SHA1
0a7a82e1bcdb7e7b2cb7cce789ade0d30f0ee34b
-
SHA256
a38e8504e13dfbdf34bde090003267ff8faff1806c15bbac89b1294b95286db1
-
SHA512
35dbff0c61d350c92bb47a4ed76cb699bf62c2b84410dbfcee1dae90e8fd59acff298320e746508d7fb27d011d629ff5485fde621feffd624f8ceaf7ba358eeb
-
SSDEEP
3072:JBmGBkePTFFmdbOWB2OwMjdX+OenERqts9mRPoubLOY00F3DSopTqNvSNt+jvSP2:JUZefO/mLRPoULWBZSv+j1ZQ+QdaXB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c09ea6035daa67319cbbe500dc763f8_JaffaCakes118
Files
-
3c09ea6035daa67319cbbe500dc763f8_JaffaCakes118.exe windows:5 windows x86 arch:x86
d8c2dd547e759f5a3e12750c5c49d959
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetBkMode
RectInRegion
GetCurrentPositionEx
GetViewportOrgEx
CreateFontIndirectW
SetDIBColorTable
CreateBrushIndirect
GetCurrentObject
EndPage
StartPage
GetCharWidth32W
GetSystemPaletteUse
SetROP2
CreateRoundRectRgn
CreatePalette
CreatePenIndirect
SetViewportExtEx
user32
GetCaretPos
KillTimer
DialogBoxIndirectParamA
RegisterWindowMessageA
AdjustWindowRect
GetWindowPlacement
CheckMenuRadioItem
GetMessageW
HideCaret
GetMenuItemInfoW
SendMessageTimeoutW
LoadIconA
LoadAcceleratorsA
IsMenu
CharUpperBuffW
IsCharLowerA
OpenInputDesktop
SystemParametersInfoW
GetScrollRange
CharToOemW
FillRect
SetRectEmpty
DrawFrameControl
CopyRect
PostMessageA
IsRectEmpty
CreatePopupMenu
LoadImageA
IsZoomed
OemToCharA
GetDC
GetWindowDC
GetLastActivePopup
EnableScrollBar
GetClassInfoA
DestroyCursor
comdlg32
FindTextW
GetOpenFileNameA
PrintDlgW
comctl32
CreatePropertySheetPageW
ImageList_LoadImageW
ImageList_Remove
ntdll
memset
kernel32
OpenFile
CreateMutexA
MoveFileA
GetTempFileNameA
GetLastError
RegisterWaitForSingleObject
EnumResourceTypesA
GetVersionExA
lstrlenW
DefineDosDeviceW
GetLongPathNameW
GetDateFormatA
GetBinaryTypeA
LocalAlloc
SystemTimeToFileTime
GetTickCount
GetStringTypeExW
SetThreadExecutionState
Exports
Exports
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nfodat Size: 512B - Virtual size: 360B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.point Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.temp Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.port Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ