Static task
static1
Behavioral task
behavioral1
Sample
3cc5a4802ad3ff8215a765ff3cca5f40_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3cc5a4802ad3ff8215a765ff3cca5f40_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3cc5a4802ad3ff8215a765ff3cca5f40_JaffaCakes118
-
Size
212KB
-
MD5
3cc5a4802ad3ff8215a765ff3cca5f40
-
SHA1
1bb1aa58c61021d6e740e9308c2333879a7ea90f
-
SHA256
cf1c30b642468a5f843cdbbdb9a457504024abec1b322d2a40199c925e737cb1
-
SHA512
23478fa7485c7b5b12bb976e17bf2f04e6f8c7053e3f73b71ce49e2dc06ea480ff70eeeb39fac58d98242ebd3e446fa9eef911857dbd729daac5960e477f807e
-
SSDEEP
3072:2tu2t2SUiIp4ExMrfQPAlzv0ZFrZZtC9pkTQmuCr3Sue5n5y:r2cLi8JqoPmzv4ZtYEBriu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cc5a4802ad3ff8215a765ff3cca5f40_JaffaCakes118
Files
-
3cc5a4802ad3ff8215a765ff3cca5f40_JaffaCakes118.exe windows:4 windows x86 arch:x86
2686a883c094d93b745465c7a7b1b3fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ExitProcess
IsBadReadPtr
GetVersionExA
lstrlenW
GetModuleHandleA
GetLastError
VirtualAlloc
lstrlenA
GetProcAddress
LocalAlloc
LoadLibraryExA
GetCommandLineA
user32
CharToOemA
GetMenuState
SetClipboardData
GetWindowTextA
DrawFrameControl
CreateIcon
GetMenuItemInfoA
EnumChildWindows
IsZoomed
GetWindowRect
CharLowerA
TrackPopupMenu
GetSubMenu
CheckMenuItem
DrawMenuBar
SetCursor
SetPropA
DrawIconEx
GetActiveWindow
InsertMenuItemA
SetParent
FillRect
GetKeyboardLayoutNameA
LoadCursorA
MapVirtualKeyA
GetForegroundWindow
DestroyCursor
GetKeyboardLayoutList
RegisterClipboardFormatA
GetMenuItemCount
MapWindowPoints
GetClassInfoA
SetScrollInfo
ShowWindow
GetFocus
SetScrollPos
IsWindowVisible
DestroyIcon
InflateRect
IsRectEmpty
GetDCEx
GetCapture
GetSysColorBrush
ShowOwnedPopups
ReleaseCapture
CharLowerBuffA
MoveWindow
SetWindowsHookExA
SetWindowLongW
MsgWaitForMultipleObjects
GetDlgItem
DispatchMessageW
GetWindow
CreateMenu
GetWindowPlacement
ReleaseDC
ScreenToClient
CloseClipboard
GetKeyState
GetScrollRange
DrawTextA
GetLastActivePopup
DrawEdge
LoadStringA
OemToCharA
GetParent
IsWindow
GetSysColor
GetCursor
CreatePopupMenu
RemovePropA
GetMenuStringA
IsChild
DeleteMenu
DispatchMessageA
EndPaint
EmptyClipboard
GetClassLongA
SetWindowPlacement
PostMessageA
DrawAnimatedRects
GetClipboardData
MessageBoxA
comdlg32
GetSaveFileNameA
ChooseColorA
gdi32
CreatePalette
CreateBitmap
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES1 Size: 512B - Virtual size: 127B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES6 Size: 512B - Virtual size: 186B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES2 Size: 2KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES8 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES4 Size: 1024B - Virtual size: 642B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ