Static task
static1
Behavioral task
behavioral1
Sample
3f185d82f871466c6276512474708453_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3f185d82f871466c6276512474708453_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3f185d82f871466c6276512474708453_JaffaCakes118
-
Size
188KB
-
MD5
3f185d82f871466c6276512474708453
-
SHA1
8012c120f53746e833d41a4fd544c2748f1c09f8
-
SHA256
ae9730a19e911458d4f16523fb64606eaa2f7106b1032c5f3b8e9fa0b6c5c066
-
SHA512
2ce5c5aabfd22b5b90985a3c1ff530a22b811aca0ba2a9786dd82b57b876c67f75930b86b546d867d82788206e4a61d4e59eac43aeea1ec191ea9b5c65d3fc17
-
SSDEEP
3072:o9wTwsjp5ZsPmVbpZ5wDJkw/wOPf4+fmbyzL799M3WCjEjbZb/a/f8Z80:oaxjs3iw/TmbS9MmvVbi/f8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f185d82f871466c6276512474708453_JaffaCakes118
Files
-
3f185d82f871466c6276512474708453_JaffaCakes118.exe windows:4 windows x86 arch:x86
e290fd961e652a0bbb0af150f18b8acd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersionExA
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentProcess
GetModuleHandleA
GetModuleHandleA
InterlockedDecrement
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
LocalFree
GetLastError
CreateMutexW
LocalAlloc
OpenMutexW
WaitForSingleObject
ResetEvent
CloseHandle
SetEvent
ReleaseMutex
FindClose
FindFirstFileW
Sleep
GetFileAttributesExW
CreateThread
GetExitCodeThread
user32
DrawTextW
GetIconInfo
GetSysColor
GetDC
ReleaseDC
shell32
ShellExecuteExW
SHAddFromPropSheetExtArray
SHGetDataFromIDListW
SHAppBarMessage
Shell_NotifyIconW
FindExecutableW
ShellExecuteW
SHGetFolderPathW
CommandLineToArgvW
Sections
.text Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 142B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ