Static task
static1
Behavioral task
behavioral1
Sample
3cbec4cfc714f41e57e42c501b975860_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3cbec4cfc714f41e57e42c501b975860_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3cbec4cfc714f41e57e42c501b975860_JaffaCakes118
-
Size
283KB
-
MD5
3cbec4cfc714f41e57e42c501b975860
-
SHA1
07196530917eaafb25466581fc4319d375f7a63f
-
SHA256
ba23581662e9ec5e291150c20b67f8a9c84fb68ac47538b4187ed5223b3c8964
-
SHA512
5fa1efd2a73b91dcbba4b450d90e98fa0e13d3d6fa7d3fe91ca60014f54b71c030c39a54046a629dead2a9fe76d06da8a20b8e4b137996c7764d2446c9c6cb03
-
SSDEEP
6144:lA5o+W4KQMfEE59HlP4A6csDWaE8zpJ9ZvhflT4hLr97eTf:S5ZW4tM8E5/QbDpJ9PfVwr9iL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cbec4cfc714f41e57e42c501b975860_JaffaCakes118
Files
-
3cbec4cfc714f41e57e42c501b975860_JaffaCakes118.exe windows:4 windows x86 arch:x86
748df6823c730e8f58914322c6ed5dd3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCP
GetModuleHandleA
CompareStringA
GetOEMCP
CreateThread
GetStdHandle
GlobalFindAtomA
ReleaseMutex
TlsFree
GetProcessHeap
GetPriorityClass
LocalHandle
GetThreadLocale
VirtualAlloc
LoadResource
OpenSemaphoreA
GetUserDefaultLangID
LocalAlloc
TlsGetValue
SetEvent
GetVolumeInformationA
user32
ShowWindow
RegisterClassA
GetClassInfoExA
GetFocus
GetWindow
GetWindowTextA
GetDC
ReleaseDC
GetSystemMetrics
IsWindowVisible
DrawTextExA
CloseWindow
GetForegroundWindow
GetClassNameA
IsIconic
GetActiveWindow
GetWindowTextLengthA
ValidateRect
InvalidateRect
shell32
SHGetFileInfoA
SHChangeNotify
SHGetMalloc
SHGetFolderPathA
SHBrowseForFolderA
userenv
LoadUserProfileA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ