Static task
static1
Behavioral task
behavioral1
Sample
3eb981cd9d2551914cb0a9486f46465f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3eb981cd9d2551914cb0a9486f46465f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3eb981cd9d2551914cb0a9486f46465f_JaffaCakes118
-
Size
276KB
-
MD5
3eb981cd9d2551914cb0a9486f46465f
-
SHA1
61178c749ac30cae1c0805e4c452e32c61ef9044
-
SHA256
7749afce040c42b5614dc944b8cc94141b30a9a9c1bf7fac6689bc119f57d381
-
SHA512
36af5da24b3f0c601d0871a7231d5085f2f2a8afa99c06fe431328ffb3ae8e7987cb2edaff39562b4e59e0c9f5acdc899dc8440b56e1730ea0f9c8d0f040988a
-
SSDEEP
6144:/VgIMAPYraFWtcSJ7RvS+nwxaGJCfyVPfVc3vy2:NgQgraF2RvS+wxajKV2fy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3eb981cd9d2551914cb0a9486f46465f_JaffaCakes118
Files
-
3eb981cd9d2551914cb0a9486f46465f_JaffaCakes118.exe windows:4 windows x86 arch:x86
3b8c1a28a4422706868b9fe432d053d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
GetCurrentProcessId
SetStdHandle
AddAtomA
GetModuleFileNameW
WriteFile
LoadLibraryExW
LoadLibraryW
GetConsoleOutputCP
SetFilePointer
GetFileAttributesW
HeapFree
GetStartupInfoA
GetStringTypeW
VirtualAlloc
FreeLibrary
GetConsoleMode
RaiseException
HeapReAlloc
SetUnhandledExceptionFilter
GetOEMCP
LCMapStringW
BeginUpdateResourceW
GetCurrentProcess
InterlockedIncrement
EnumResourceNamesW
LCMapStringA
LeaveCriticalSection
GetProcessHeap
IsValidCodePage
GetACP
IsDebuggerPresent
CheckNameLegalDOS8Dot3W
UpdateResourceW
GetStringTypeA
HeapSize
UnhandledExceptionFilter
GetConsoleCP
GetVersionExA
GetCommandLineA
GetCPInfo
GetSystemTimeAsFileTime
GetModuleHandleA
EnterCriticalSection
RtlUnwind
HeapAlloc
WideCharToMultiByte
InterlockedDecrement
setupapi
CM_Get_Child
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
shell32
SHGetSpecialFolderPathA
ole32
StringFromGUID2
CoFreeUnusedLibraries
CoCreateInstance
CoUninitialize
CoInitialize
Sections
.text Size: 137KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ