Static task
static1
Behavioral task
behavioral1
Sample
f3c8f52d2a65bfc82ee353e5d345fcbd_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3c8f52d2a65bfc82ee353e5d345fcbd_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3c8f52d2a65bfc82ee353e5d345fcbd_JaffaCakes118
-
Size
33KB
-
MD5
f3c8f52d2a65bfc82ee353e5d345fcbd
-
SHA1
9b2f8c86f38cfd03ede9930540de5a70fb0cfef9
-
SHA256
8895ed0b157ce24af4c4aa25a79a74149f204cc70757c5021d5ecc8cb10b0cb1
-
SHA512
8e8cca04209ed993e66e25dcb57fef32a1e52749ea210524af2097f31042c65f7e0b4ff7f32c4d9b149cb8b342090e6dde6a4a2b4ed6879097514135e12626b8
-
SSDEEP
768:2ckTzD2fJlkfZnkIZHwogaPHmNJM/r21MLkSc:iTGfJlkfZnMAHmNJ6r21MLk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3c8f52d2a65bfc82ee353e5d345fcbd_JaffaCakes118
Files
-
f3c8f52d2a65bfc82ee353e5d345fcbd_JaffaCakes118.exe windows:4 windows x86 arch:x86
37864467a36d50fb91fb94ca0b7c38c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW
msvcrt
_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf
shell32
SHLoadOLE
StrStrIA
DuplicateIcon
Sections
.text Size: 20KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE