Static task
static1
Behavioral task
behavioral1
Sample
3ec7b9794b38a07a941c236053f94b62_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3ec7b9794b38a07a941c236053f94b62_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3ec7b9794b38a07a941c236053f94b62_JaffaCakes118
-
Size
321KB
-
MD5
3ec7b9794b38a07a941c236053f94b62
-
SHA1
0308febca4d967f6224e8dfe769e73e9ce323aed
-
SHA256
e3ac5bec7540cabb1a236e4ba596d37e171a8784e39ad257c656fec8ddeaf4a8
-
SHA512
60c88643253db4d63dd80592cf6e8cd6bb79e1d8ef2f61b14daa01dfe424626db9d0338f3047a0167843c6553ab42cf7e0b87e749eef9b232f9555e508488752
-
SSDEEP
6144:8dVhzctJoYKS6/TJ80uIe1NF/5dVI4vYXbuleeehcJY1CZ/Hko8ZjJjsXPpPkYfE:8dctJM/TJXe1RLYrutehGZ/v6JAXhMYs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ec7b9794b38a07a941c236053f94b62_JaffaCakes118
Files
-
3ec7b9794b38a07a941c236053f94b62_JaffaCakes118.exe windows:4 windows x86 arch:x86
6b0b1ec20a44128319a6d7cc94234a3f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
RaiseException
HeapCreate
SetErrorMode
LockResource
GetDriveTypeA
SetConsoleOutputCP
VirtualProtect
FoldStringA
Sleep
GetLocaleInfoA
CloseHandle
InterlockedExchange
GlobalAddAtomA
GetACP
LoadLibraryExA
GlobalUnlock
EnterCriticalSection
GlobalFree
GetStdHandle
GlobalDeleteAtom
user32
GetWindowTextA
ReleaseDC
DrawEdge
GetWindow
DrawTextA
GetClassNameA
GetCursorPos
IsIconic
SetForegroundWindow
ShowWindow
GetMenuItemInfoA
CharToOemBuffA
ClipCursor
GetFocus
BeginPaint
EndPaint
GetParent
GetActiveWindow
ValidateRect
version
VerInstallFileA
VerQueryValueA
GetFileVersionInfoA
VerFindFileA
GetFileVersionInfoSizeA
rasadhlp
WSAttemptAutodialName
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ