Static task
static1
Behavioral task
behavioral1
Sample
3dbacf2bb380650ee2c3d6a0b3670f1b_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3dbacf2bb380650ee2c3d6a0b3670f1b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3dbacf2bb380650ee2c3d6a0b3670f1b_JaffaCakes118
-
Size
224KB
-
MD5
3dbacf2bb380650ee2c3d6a0b3670f1b
-
SHA1
ccff8c6c3ff2f20e660c73f9f1e23a77af3452ad
-
SHA256
006b513c49c5319e9780e71a6f051152f7e9fb3fcfffdbda708a5ad1cf9fb5f7
-
SHA512
2f599c0927e904e7c3db13000b45bfdb772109aba4206b4a34bc1edf7de6379431377052d9b5d3c5faa498d7aa98a469335ecdb9fc25bf12f8b916008599b61f
-
SSDEEP
3072:/5Q2a+fUOht+zQf10zYM4AynNRjKdOiRnn55i:/e2a+8t0Gz3yNE7nn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dbacf2bb380650ee2c3d6a0b3670f1b_JaffaCakes118
Files
-
3dbacf2bb380650ee2c3d6a0b3670f1b_JaffaCakes118.exe windows:5 windows x86 arch:x86
0aa0aafca128599168895a49921aacac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
CloseHandle
CreateEventW
CreateFileW
CreateThread
FlushFileBuffers
GetACP
GetCPInfo
GetCurrentThreadId
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetOverlappedResult
GetProcessHeap
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
HeapCreate
HeapDestroy
GetStartupInfoW
HeapReAlloc
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LCMapStringA
LCMapStringW
LoadLibraryA
LocalFree
MulDiv
MultiByteToWideChar
ReadFile
ResetEvent
RtlUnwind
SetEvent
SetFilePointer
SetHandleCount
SetStdHandle
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WriteFile
lstrlenA
lstrlenW
LocalAlloc
CreateFileA
HeapFree
GetCurrentThread
user32
LoadIconW
GetSystemMetrics
gdi32
GetStockObject
advapi32
RegOpenKeyExA
Sections
.text Size: 217KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text3 Size: 512B - Virtual size: 333B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 440B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ