Static task
static1
Behavioral task
behavioral1
Sample
3e4aeb15db76777d897e796cc6415f2c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3e4aeb15db76777d897e796cc6415f2c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3e4aeb15db76777d897e796cc6415f2c_JaffaCakes118
-
Size
40KB
-
MD5
3e4aeb15db76777d897e796cc6415f2c
-
SHA1
7c3db1ea8a9600b83bae3122373a6c95aa8c854a
-
SHA256
aa466bc2f9e241973bcf77d427f60a416c269f441395e966c33fb66ccdc64e8e
-
SHA512
fd0a6de91207d0b66a46f39a33b492d173fc5f2f0d3e61d4227a507648905465259f34c2904ffbbbfa5dfbd38655f3be4cc2eb78a3a04458f1816f6074519e27
-
SSDEEP
384:OGycu2KKirJdkwAjBGoZHRv3bY9TyMtTNS581fAQP+2GddD5wXG7DYQ9UnFVg9Wp:791irJjqB7nvbaTAqFQjaX3Q6FVgJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e4aeb15db76777d897e796cc6415f2c_JaffaCakes118
Files
-
3e4aeb15db76777d897e796cc6415f2c_JaffaCakes118.exe windows:4 windows x86 arch:x86
d55948b743761932961e0741e977b16a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
kernel32
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
LCMapStringW
FindNextFileA
SetFilePointer
LoadLibraryA
SetEndOfFile
CreateFileA
ReadFile
GetLastError
GetFileAttributesA
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
GetModuleFileNameA
GetCommandLineA
GetVersion
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapFree
CloseHandle
GetProcAddress
GetStringTypeW
GetEnvironmentStrings
GetEnvironmentStringsW
FindFirstFileA
FindClose
GetCPInfo
GetACP
GetOEMCP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
RtlUnwind
WriteFile
HeapDestroy
HeapCreate
VirtualFree
SetStdHandle
VirtualAlloc
FlushFileBuffers
GetStringTypeA
ole32
OleUninitialize
OleInitialize
oleaut32
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mjg Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE