Static task
static1
Behavioral task
behavioral1
Sample
3f6110baabc4e017ae57dafa1539b287_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3f6110baabc4e017ae57dafa1539b287_JaffaCakes118
-
Size
125KB
-
MD5
3f6110baabc4e017ae57dafa1539b287
-
SHA1
30615f44be6c9fc6f40d3e5cef193dc6ff09429e
-
SHA256
f64b1f4fdcbd3c0d07fe90b589cbb90e1666991989fdc8c6a158b98381df75d5
-
SHA512
e7e31bc8249ef59dfd9f8fa8a60426f9f1605d8bc51be74d0d548e3c7ae40571673c3df5a731221e8aa60be8f94405c73185a2069094ac523ac357f8cb9d2b23
-
SSDEEP
3072:FQYVMIllPTAJGuo6L8JKO4/AP2sMsROkW9HiUR:FdVMIllPTAJXCJx8Ls9OkW9H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f6110baabc4e017ae57dafa1539b287_JaffaCakes118
Files
-
3f6110baabc4e017ae57dafa1539b287_JaffaCakes118.exe windows:4 windows x86 arch:x86
acadb6099467fc53bc8d25b5fb20ae78
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
??3@YAXPAX@Z
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
rand
strlen
atoi
memcpy
memset
??2@YAPAXI@Z
strcpy
strtok
strcmp
getenv
strcat
kernel32
GetStartupInfoA
WriteConsoleA
AllocConsole
lstrcmpiA
IsDebuggerPresent
GetCurrentProcess
GetModuleHandleA
lstrcmpA
ReadProcessMemory
Sleep
GetModuleFileNameW
lstrlenW
WriteProcessMemory
GetCommandLineA
LoadLibraryA
GetModuleFileNameA
lstrcpyA
CreateMutexA
GetLastError
lstrcatA
CreateThread
WaitForSingleObject
ExitProcess
lstrlenA
GetProcAddress
user32
KillTimer
InsertMenuA
DispatchMessageA
GetWindowLongA
ShowWindow
GetWindowRect
GetSysColor
MessageBoxA
MessageBoxW
SetTimer
LoadMenuA
gdi32
SelectPalette
DeleteDC
DeleteObject
shell32
Shell_NotifyIconA
ole32
CoInitialize
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gmgqtdw Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE