Static task
static1
Behavioral task
behavioral1
Sample
3daac60bad203b40632acac437a21bcc_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3daac60bad203b40632acac437a21bcc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3daac60bad203b40632acac437a21bcc_JaffaCakes118
-
Size
99KB
-
MD5
3daac60bad203b40632acac437a21bcc
-
SHA1
ac80018aca0c9d2efe16d3266db1c6e72f8a4b09
-
SHA256
d0788936f02fecdf9c649df9a06ccf44d58f4717b3b20574b06bc150f6afb48e
-
SHA512
09ca1c1f1a508570bdc54a4f78abcb2ac407585bdcb00b348be6e67e88f5f2f8dfd8fac9cb2ba22c8f924f964cf173ce746f7d267549a3edf3d5a573bdaabf81
-
SSDEEP
1536:3Wj+sm5PqhJtjixTbnqMqTKTelAx1BcaOLbB6HuhJGiDKCVQKBReukTZ:Hsey9ixyTDyb6vL4umiDKy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3daac60bad203b40632acac437a21bcc_JaffaCakes118
Files
-
3daac60bad203b40632acac437a21bcc_JaffaCakes118.exe windows:5 windows x86 arch:x86
7a0bc957240541629f24074327dcb05a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyExW
RegCloseKey
RegSetValueExW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegDeleteKeyW
RegEnumKeyExW
comctl32
CreatePropertySheetPageW
PropertySheetW
certcli
CASetCertTypeKeySpec
CAFindByName
CAAddCACertificateType
CACreateCertType
CAEnumNextCertType
CAFreeCAProperty
CARemoveCACertificateType
CACertTypeGetSecurity
CAFindCertTypeByName
CAGetCertTypePropertyEx
CAGetCertTypeProperty
CAFreeCertTypeProperty
CAUpdateCA
CASetCertTypeProperty
CASetCertTypeFlags
CAEnumCertTypesForCA
CAEnumCertTypes
CACloseCA
CACertTypeSetSecurity
CAGetCAProperty
CAFreeCertTypeExtensions
CAGetCertTypeExtensions
CAUpdateCertType
CACloseCertType
CASetCertTypeExtension
CAGetCertTypeFlags
CAGetCertTypeKeySpec
kernel32
GetTickCount
GetModuleFileNameW
IsBadReadPtr
GlobalUnlock
OutputDebugStringW
GetACP
GetDateFormatW
FormatMessageW
GetSystemWindowsDirectoryW
CloseHandle
GetLastError
CreateFileW
LocalReAlloc
QueryPerformanceCounter
InitializeCriticalSection
FileTimeToLocalFileTime
lstrcpyW
LocalFree
GetComputerNameW
lstrcmpiW
GlobalAlloc
GetEnvironmentStringsW
DeleteCriticalSection
LoadLibraryW
SetLastError
FileTimeToSystemTime
GlobalLock
SetUnhandledExceptionFilter
lstrlenW
RemoveDirectoryA
GetCurrentProcess
InterlockedDecrement
GetStartupInfoA
InterlockedIncrement
GlobalFree
WideCharToMultiByte
GetSystemDefaultLangID
GetModuleHandleA
GetSystemTimeAsFileTime
OutputDebugStringA
user32
PostMessageW
DialogBoxParamW
SetWindowLongW
GetWindowLongW
LoadIconW
wsprintfW
RegisterClipboardFormatW
MessageBoxW
GetDlgItem
SystemParametersInfoW
GetParent
InsertMenuItemW
LoadImageW
SendDlgItemMessageW
SetCursor
EnableWindow
ReleaseDC
GetDlgItemTextA
SetWindowTextW
WinHelpW
EndDialog
SendMessageW
SetFocus
LoadCursorW
LoadStringW
SetDlgItemTextW
LoadBitmapW
GetDC
msvcrt
mbstowcs
memmove
_wcsupr
wcsrchr
_onexit
??3@YAXPAX@Z
wcsstr
wcscpy
wcscmp
__RTDynamicCast
_except_handler3
_adjust_fdiv
wcscat
vswprintf
??2@YAPAXI@Z
free
wcstoul
wcschr
wcslen
_purecall
malloc
_wcsicmp
_initterm
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__dllonexit
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ