Static task
static1
Behavioral task
behavioral1
Sample
3e7e9bc460cc38895b633e4a0da86f41_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3e7e9bc460cc38895b633e4a0da86f41_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3e7e9bc460cc38895b633e4a0da86f41_JaffaCakes118
-
Size
364KB
-
MD5
3e7e9bc460cc38895b633e4a0da86f41
-
SHA1
c7d44f13d727bad3a9a0e5d0b614f6ea46919976
-
SHA256
a2de02c8a5460f997767fad7dd2a113fcda8c345b35ac18e30656b307dabfb22
-
SHA512
410f6b4b6284ce6048e998b24d3a740c0d33149bc98e031a9b50ac765b1e6d21c53cf39cb498064fa361794b6bc619a7488a6de38c4b87039b6c8cf08bc621e4
-
SSDEEP
6144:N6Q7qb77OTZEX+Kbzg6qu1JtOXOJ13EtwEGbkhdt1qs3LU4Y9:lqbCOOQtO+7EeEfzqqL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e7e9bc460cc38895b633e4a0da86f41_JaffaCakes118
Files
-
3e7e9bc460cc38895b633e4a0da86f41_JaffaCakes118.exe windows:4 windows x86 arch:x86
f4d36d6fe3d17b8e0b3e168e4666a0d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalSize
VirtualProtect
GetAtomNameA
GetConsoleCP
CompareFileTime
GetTickCount
WaitForSingleObject
GetModuleHandleA
GetConsoleDisplayMode
HeapReAlloc
WaitForMultipleObjects
InterlockedExchange
SetLastError
GetVersion
HeapCreate
LoadLibraryExA
GetUserDefaultLangID
ResumeThread
GetCommandLineA
GlobalUnlock
lstrlenA
user32
GetCursorPos
GetParent
ShowWindow
AnyPopup
BeginPaint
GetFocus
wsprintfA
GetWindow
DragDetect
CreateIcon
GetClassNameA
FillRect
GetTitleBarInfo
GetDC
SetForegroundWindow
FrameRect
DrawTextA
ReleaseDC
EndPaint
rastapi
AddPorts
DeviceListen
DeviceDone
DeviceConnect
PortClose
quartz
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ