Static task
static1
Behavioral task
behavioral1
Sample
3d4e6257f9378462f80ee3e84e1416fb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3d4e6257f9378462f80ee3e84e1416fb_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3d4e6257f9378462f80ee3e84e1416fb_JaffaCakes118
-
Size
163KB
-
MD5
3d4e6257f9378462f80ee3e84e1416fb
-
SHA1
98aaa1f707d8a7f6a608edcc8d62f97277990ef6
-
SHA256
ef01fe1c02006f731a880dec36ad4c27d91213a675753c392962c4d192b837cc
-
SHA512
091b5c04030fb8ac13c4f4e8d9f8cf1a0f8325a88b4da3bafbd48fa198f38b365e4c295f9c8c17a0216d741bc35693b8fd8d9a75a318354382211c907d930292
-
SSDEEP
3072:9/sL8KKdSFrR9aiXm+6BnayCb0L16+kWKPm7AtqLZ/dWk5nAQ7jZSB3er:5YNFr/aphzGK1GWf7AtqNFBVASjZSBQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d4e6257f9378462f80ee3e84e1416fb_JaffaCakes118
Files
-
3d4e6257f9378462f80ee3e84e1416fb_JaffaCakes118.exe windows:5 windows x86 arch:x86
1a802831e3d347bb93296e84c7501fe3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
RtlUnwind
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryW
EnterCriticalSection
GetCurrentProcessId
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
CloseHandle
GetLocalTime
CreateFileW
ReadFile
HeapCreate
HeapAlloc
GetFileSize
LeaveCriticalSection
ExitProcess
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetLastError
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetProcAddress
GetModuleHandleW
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
SetUnhandledExceptionFilter
GetModuleFileNameA
IsProcessorFeaturePresent
user32
DestroyWindow
GetMessageA
GetClassNameA
ScreenToClient
GetWindowRect
PostQuitMessage
GetParent
LoadIconA
GetClientRect
SetFocus
SendMessageA
SendDlgItemMessageA
TranslateMessage
MessageBoxA
UnregisterClassA
GetWindowLongA
CreateWindowExA
GetDlgItem
GetDesktopWindow
SetWindowPos
ShowWindow
DispatchMessageA
GetMenuInfo
CloseWindow
LoadCursorA
RegisterClassA
MoveWindow
IsDialogMessageA
gdi32
SetTextAlign
MoveToEx
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ