Static task
static1
Behavioral task
behavioral1
Sample
3746362a2f4601e7dd6512bc000febbd_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3746362a2f4601e7dd6512bc000febbd_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
3746362a2f4601e7dd6512bc000febbd_JaffaCakes118
-
Size
6KB
-
MD5
3746362a2f4601e7dd6512bc000febbd
-
SHA1
485153b593aa70d554a48f2bd5ef290472c15b3d
-
SHA256
012d33b6a70c7d72c9f8de0955b05ff215ad1d41d0da1fd662c53ff53fafb272
-
SHA512
69e4d81542c3c598bc3aff2885512edf888e3793852dd8a6fca0976751afa247e903821280346c0b4356de4cab1887cdaf13a6a12627bf5a21939ee6e9c56bd5
-
SSDEEP
96:AjUlb3n5FPKTuxujiiXcSotVYu7ju3gUMrn6O1uWEPWBORy+h/cfnp3:L1nPKyxutcbtVvu3Mr6ykYp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3746362a2f4601e7dd6512bc000febbd_JaffaCakes118
Files
-
3746362a2f4601e7dd6512bc000febbd_JaffaCakes118.exe windows:4 windows x86 arch:x86
86edf38bfe07118ecd0f2b4a0d64730b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
cygwin1
exit
cygpopt-0
poptGetArgs
gdi32
DeleteDC
user32
GetDC
Sections
.MPRESS1 Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 999B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE