Static task
static1
Behavioral task
behavioral1
Sample
3fe3381b02531b9a6deda0e91ed6c11f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3fe3381b02531b9a6deda0e91ed6c11f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3fe3381b02531b9a6deda0e91ed6c11f_JaffaCakes118
-
Size
76KB
-
MD5
3fe3381b02531b9a6deda0e91ed6c11f
-
SHA1
8553af799605f3aa2f500afc2ad39794ad3ced51
-
SHA256
dbe2c6dc9035d583654bf9555035b3eb4a37554839b4693bf123d9cca23cef08
-
SHA512
0e9bbedf706462bbd2d68f80c0ff18ea1daeaa76e3dc007e6b9a2b19ed0bfd0270b8c7ec5264126631d11aa61c944d9fb6c32951972dbcf32521d6c0f495ced5
-
SSDEEP
768:etUoGyrX0afRNjqxNhA1Z8RNx2HsdJ0kNMyMnY2RlcuM/mBn8A:WFX0QRgxNhW6xYsdqkynpB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fe3381b02531b9a6deda0e91ed6c11f_JaffaCakes118
Files
-
3fe3381b02531b9a6deda0e91ed6c11f_JaffaCakes118.exe windows:4 windows x86 arch:x86
5543e703e18054d734c26432e721de70
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
GetFileAttributesA
SetFileAttributesA
CreateDirectoryA
SetFilePointer
FindFirstFileA
GetVersionExA
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
GetEnvironmentVariableA
GetEnvironmentStringsW
WriteFile
ReadFile
TlsAlloc
TlsGetValue
CreateFileA
SetNamedPipeHandleState
TlsSetValue
CloseHandle
GetSystemDirectoryA
GetModuleFileNameA
lstrlenA
CreateMutexA
GetLastError
CreateThread
Sleep
FreeLibrary
LoadLibraryA
LoadLibraryExA
GetProcAddress
GetModuleHandleA
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
GetVersion
HeapReAlloc
HeapAlloc
HeapSize
HeapFree
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
user32
MessageBoxA
EndPaint
PostQuitMessage
DestroyWindow
DefWindowProcA
FindWindowA
SendMessageA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
BeginPaint
gdi32
TextOutA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE