Static task
static1
Behavioral task
behavioral1
Sample
3225dd39abfd3a97f5b088c43c9cc754_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3225dd39abfd3a97f5b088c43c9cc754_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3225dd39abfd3a97f5b088c43c9cc754_JaffaCakes118
-
Size
348KB
-
MD5
3225dd39abfd3a97f5b088c43c9cc754
-
SHA1
c042901312dfe05855b769ab0b447ac0f020599b
-
SHA256
e9b187ec5815ce6332edb355ac1b1018319e0bbd6519025856e850e6e50a80d0
-
SHA512
59a7d333be197343bcd33859197f50da89495bd3781732a364d700a015318f4fb19bd72c8507a9a5e568d58d19ae7b16e8a007868de83c4835178e3c76525a5f
-
SSDEEP
6144:EOnFpVQS+3uj2BXNsVF110QHNHbUIxYzzkfQpwJupJoCO5m:HFb23uOX+VF110+HJxwIfQpwJIJDcm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3225dd39abfd3a97f5b088c43c9cc754_JaffaCakes118
Files
-
3225dd39abfd3a97f5b088c43c9cc754_JaffaCakes118.exe windows:4 windows x86 arch:x86
9ec6a573d2e74bf19d7546b3a6b639cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitThread
Sections
Jc??|..| Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Jc??|..| Size: 338KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Jc??|..| Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE