Static task
static1
Behavioral task
behavioral1
Sample
3dd2b418d5595c74b95bf8e29195f5a5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3dd2b418d5595c74b95bf8e29195f5a5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3dd2b418d5595c74b95bf8e29195f5a5_JaffaCakes118
-
Size
318KB
-
MD5
3dd2b418d5595c74b95bf8e29195f5a5
-
SHA1
31740219f768a76bfceb9b99c74d504d7cbda6c7
-
SHA256
cbd27a16e2b50bb1587ecca4f7c31c356be6c155b27c708a6d07c97f2f96166f
-
SHA512
9a52fa1c2b00f7cd3d0eb3e88809ce7369a720da567dd8630c7a7767908e4164b639bfdfb519ddcfd5dac30196dcc772e42918b6e89138da1c31ca47aa172fb6
-
SSDEEP
6144:hWLxTJ7zfQ/sdB8K3gNQeYMtls8Vz+8ZVnKJjY60X/30yL/7YqY0D:hWH1BqNQebp/XnKJq/0yL/tY0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dd2b418d5595c74b95bf8e29195f5a5_JaffaCakes118
Files
-
3dd2b418d5595c74b95bf8e29195f5a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
f1aa673b0cc92dde060f20b69dca7046
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
FindFirstFileA
HeapLock
GetProcAddress
VirtualAlloc
GetModuleHandleA
GlobalLock
FindClose
GetLastError
VirtualFree
VirtualProtect
LocalFree
GlobalAlloc
ExitProcess
IsBadWritePtr
OpenMutexA
CreateTimerQueue
IsBadCodePtr
CreateThread
TlsGetValue
LocalReAlloc
HeapAlloc
HeapReAlloc
HeapFree
RtlUnwind
LoadLibraryA
GetCurrentProcess
TerminateProcess
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
user32
MoveWindow
PostMessageA
GetClientRect
GetParent
ole32
CoInitialize
CoCreateInstance
psapi
GetModuleBaseNameA
msvfw32
DrawDibClose
DrawDibStop
gdiplus
GdiplusStartup
GdiplusShutdown
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 284KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 353KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ