Static task
static1
Behavioral task
behavioral1
Sample
3f856e5eee89735fcd99bd6d5d9da052_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3f856e5eee89735fcd99bd6d5d9da052_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3f856e5eee89735fcd99bd6d5d9da052_JaffaCakes118
-
Size
253KB
-
MD5
3f856e5eee89735fcd99bd6d5d9da052
-
SHA1
c2c62e41b094f20c1e2eafe08f3975d0e5c8dbb0
-
SHA256
e0143c105507fc63bd8031d8909c693456ab412435ff22e9e9299305614763ff
-
SHA512
cb48358b1a12d23be864eb5e8af5b7576911ec2ac82ea5e43336fa774671c4b92b504c489eb3200f1262ea24a8f0d4b7ca5540c40a2c5ac68ea9085af3ce39be
-
SSDEEP
3072:Q8ZbLC3dtY1gBIQfnEhWp76X4B0nPRVZ7OnT7FdGPChZ+02dKuvR8AhMwIeEF/:zG3dGQfnSYS40pmvWC/FXuvO4Mr5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f856e5eee89735fcd99bd6d5d9da052_JaffaCakes118
Files
-
3f856e5eee89735fcd99bd6d5d9da052_JaffaCakes118.exe windows:5 windows x86 arch:x86
94af2d78ffaec055d8fa82f035734968
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
DeleteFileW
OpenFileMappingA
CopyFileA
WriteFile
GetLocalTime
DeleteFileA
CopyFileExA
GetCommandLineA
GlobalFree
GetFileTime
ExitThread
OpenFile
lstrcatA
FreeResource
ExitProcess
CompareStringA
lstrlenA
ReadFile
GetFileType
advapi32
RegEnumKeyExA
RegGetKeySecurity
RegQueryValueExA
RegQueryValueExW
user32
InsertMenuA
GetMenu
AppendMenuA
GetCursor
BeginPaint
Sections
.8911 Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.17db Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3ffg9 Size: 209KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7g1eb Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ