_ReflectiveLoader@0
Behavioral task
behavioral1
Sample
3ee0305e2d0cf1ae166d8f91c8ebd1ff_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3ee0305e2d0cf1ae166d8f91c8ebd1ff_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
3ee0305e2d0cf1ae166d8f91c8ebd1ff_JaffaCakes118
-
Size
69KB
-
MD5
3ee0305e2d0cf1ae166d8f91c8ebd1ff
-
SHA1
6f651cf5e146821b25641b15f284b6193c87dec5
-
SHA256
e9eaa68604b4d1ad1989e8cef28904e69cf9867262aee6684cdcc89f40615aa7
-
SHA512
c14ac4d66bda3d0b93e3a2c7509aba7fb09b31f186a8f41c45ac71e0cceb0e89a62cd6397829b4032562707f7d1eb3e0c489c66fdf95cb7af6ff147d094504ea
-
SSDEEP
1536:BZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAmMqqU+2bbbAV2/S2Lccu:9BounVyFHjMqqDL2/Lcc
Malware Config
Signatures
-
GandCrab payload 1 IoCs
resource yara_rule sample family_gandcrab -
Gandcrab family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ee0305e2d0cf1ae166d8f91c8ebd1ff_JaffaCakes118
Files
-
3ee0305e2d0cf1ae166d8f91c8ebd1ff_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ