Static task
static1
Behavioral task
behavioral1
Sample
3fb7373d4963d674ecaaea0e503097c0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3fb7373d4963d674ecaaea0e503097c0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3fb7373d4963d674ecaaea0e503097c0_JaffaCakes118
-
Size
297KB
-
MD5
3fb7373d4963d674ecaaea0e503097c0
-
SHA1
c1d42988b858531888e6810be0b05d97ff02ae23
-
SHA256
31a01662075adebf14494020d4cc76967222a20ee8cdbc9c649a8bfc48a91b55
-
SHA512
282a6e50dd7f2dbc142dd3dd666794e7a52ef16ada3e8b8a1099ef3b2ad82cd4704cbcf4b2ff68a7986da2aaece188054adaac112d82f98ac9d75c82dc979b55
-
SSDEEP
6144:4dzTPyZGTnljRmaWasPmOkd2y848s3vH/JCb2ayeTmVgVulJ02g:49Ty4zljRmzPmOPy848uvH/JYThT+YQ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fb7373d4963d674ecaaea0e503097c0_JaffaCakes118
Files
-
3fb7373d4963d674ecaaea0e503097c0_JaffaCakes118.exe windows:5 windows x86 arch:x86
f4fef099fabe3248c3596b03db3585b3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
RtlUnwind
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
IsProcessorFeaturePresent
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
LCMapStringW
MultiByteToWideChar
GetStringTypeW
CloseHandle
DeviceIoControl
GetLastError
HeapCreate
GetTickCount
GetCurrentProcess
HeapAlloc
SetHandleCount
CreateFileA
TlsGetValue
TlsAlloc
LoadLibraryW
HeapFree
HeapReAlloc
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
user32
ClientToScreen
GetParent
LoadMenuA
WindowFromPoint
EnumWindows
GetAncestor
GetDlgItem
SetDlgItemTextW
UpdateWindow
EnableWindow
advapi32
RegCloseKey
shell32
DragQueryFileW
DragFinish
DragQueryPoint
gdiplus
GdiplusStartup
Sections
.text Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 197KB - Virtual size: 239KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ