Static task
static1
Behavioral task
behavioral1
Sample
3ffc9d54581eb636d8390d6de9cc7780_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3ffc9d54581eb636d8390d6de9cc7780_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
3ffc9d54581eb636d8390d6de9cc7780_JaffaCakes118
-
Size
19KB
-
MD5
3ffc9d54581eb636d8390d6de9cc7780
-
SHA1
45b20d36e231d52a0b6ad0f136acdd3462407cfc
-
SHA256
d336a54293af4e20628f7fc18822c286edaac38deda1d93ac8178bd26d0958bc
-
SHA512
e44dbe6997482b7b2bf5934b6cbc42f80b7d2c8e3ba0289c820562771065f05af8dfac650acb0ce3ad72f955bb7e80100e9d616d87aa079df65ca3f15bcb4d57
-
SSDEEP
384:SajFJBXtYCF0NKvy3qmfWl1LTGRxQrhSymx7vvxlLN:jJbXtYCFRsqMq5boyg7DN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ffc9d54581eb636d8390d6de9cc7780_JaffaCakes118
Files
-
3ffc9d54581eb636d8390d6de9cc7780_JaffaCakes118.exe windows:4 windows x86 arch:x86
d5cd4a2d5bb9b947f8ba111823047f7e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
_open
Sections
.MPRESS1 Size: 15KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE