Static task
static1
Behavioral task
behavioral1
Sample
3b3c2b3dbf8a624ebf13da601a54d3b7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3b3c2b3dbf8a624ebf13da601a54d3b7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
3b3c2b3dbf8a624ebf13da601a54d3b7_JaffaCakes118
-
Size
8KB
-
MD5
3b3c2b3dbf8a624ebf13da601a54d3b7
-
SHA1
5b1a32ac49711ba6edab8fb0e380554dc3199d99
-
SHA256
7148fa3c75230bf8e18ac96a6a0d87ecabd295b253b1982969160f9583145629
-
SHA512
cd2503f3d0765e73346f93e316f6d3c5d9f5b8280c6e60695a914225ae52c741c98fd886679f0b403794dbba6e760b280b9d8e8e357101a79dd60728b0276520
-
SSDEEP
192:AvYb7lNsIY7HJtPjstsn7YfbJvI7gvTir+GXF6BKIUBDYkFYp:wGnwHTst6a9vIkL4XF0K5FYp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b3c2b3dbf8a624ebf13da601a54d3b7_JaffaCakes118
Files
-
3b3c2b3dbf8a624ebf13da601a54d3b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
f5e3290e908e7114b577d1ba0e001423
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
_stat
ole32
CoInitialize
user32
GetDesktopWindow
winmm
OpenDriver
Sections
.MPRESS1 Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE