Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_3d7ab3c82ff1bcbc67586bb81a70faef.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_3d7ab3c82ff1bcbc67586bb81a70faef.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_3d7ab3c82ff1bcbc67586bb81a70faef
-
Size
277KB
-
MD5
3d7ab3c82ff1bcbc67586bb81a70faef
-
SHA1
a415565468ea25c155412e39fb759a8dae5ea699
-
SHA256
4dca60f3afa906181a4b2621a42fad46319d2f2d97690bd92586ad210fd83c76
-
SHA512
b2a43d612720ea5b8284d1c42b6ed6ee140cead23e46723b79c3c666bd76387de0ca4b0a1a4fe53c26506667c45b1261c5573b2c89050ef03391b2e3be720763
-
SSDEEP
6144:NONJPv2cuUJo6J6PjtkGtvOAFP1iCFJ50EczMKed7:NONVFxJWtkGvzQCGEcoJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_3d7ab3c82ff1bcbc67586bb81a70faef
Files
-
JaffaCakes118_3d7ab3c82ff1bcbc67586bb81a70faef.exe windows:4 windows x86 arch:x86
a84685c121b43cb37fffb0451ca41dd1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueA
RegEnumKeyExA
RegEnumKeyA
RegCloseKey
kernel32
GetStartupInfoA
FindFirstFileA
VirtualProtect
GetOEMCP
AddAtomW
UnhandledExceptionFilter
GetThreadLocale
ReadFile
GetEnvironmentStrings
GetStringTypeA
GetEnvironmentStringsW
TerminateProcess
IsBadReadPtr
FlushFileBuffers
GetACP
TlsSetValue
GetCurrentProcess
GetLocaleInfoA
GetModuleFileNameA
GetFileAttributesA
LCMapStringA
HeapSize
EnumResourceNamesA
GetStdHandle
GetVersionExA
GetFullPathNameA
SetStdHandle
WideCharToMultiByte
LCMapStringW
TlsGetValue
GetStringTypeW
CreateFileA
WriteFileGather
FreeEnvironmentStringsA
IsBadCodePtr
GetCPInfo
SetHandleCount
FreeEnvironmentStringsW
SetFilePointer
WriteFile
GetFileType
SetUnhandledExceptionFilter
GetDiskFreeSpaceA
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
lz32
LZClose
LZCopy
LZOpenFileA
Sections
.text Size: 136KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ