Static task
static1
Behavioral task
behavioral1
Sample
341c7d3e04c138f559a0340885dce13b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
341c7d3e04c138f559a0340885dce13b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
341c7d3e04c138f559a0340885dce13b_JaffaCakes118
-
Size
76KB
-
MD5
341c7d3e04c138f559a0340885dce13b
-
SHA1
a459b12460a2e10d5357d4995be317ab4aaf3e8e
-
SHA256
e43ef40aa3e0674a1ae6a2c91cd52370cdf6208e7fe0afe84f618bc4463aee84
-
SHA512
e28fbc317e02b6732db132f2148927667537929fb05114437127ff12d9fad32d60c5fe7060c7b6bae59132c7b6b9ca2b0b5a71bff257e977062a83ac06dbeee8
-
SSDEEP
1536:aFieBe97kfx0wT423q+VCOMS8sbBepzmH2CcapjVrs2ryrd1vUQuq6:6TeN00wTbq+VCZS8sQpzmW5aHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 341c7d3e04c138f559a0340885dce13b_JaffaCakes118
Files
-
341c7d3e04c138f559a0340885dce13b_JaffaCakes118.exe windows:4 windows x86 arch:x86
a33029fad5ac061fa369bcf0e46710cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FatalAppExitW
WaitCommEvent
CreateFiber
IsBadCodePtr
FindResourceA
AddLocalAlternateComputerNameW
BasepCheckWinSaferRestrictions
SetCriticalSectionSpinCount
QueryActCtxW
RtlUnwind
IsSystemResumeAutomatic
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE