Static task
static1
Behavioral task
behavioral1
Sample
3447fdf44a547edeaf5359483266413c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3447fdf44a547edeaf5359483266413c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3447fdf44a547edeaf5359483266413c_JaffaCakes118
-
Size
1.9MB
-
MD5
3447fdf44a547edeaf5359483266413c
-
SHA1
f170cb75a9769edc0d9d02dc544b4d3ac1e94c2d
-
SHA256
d4babbe6335d8a33ad80f5d541dfa9abdbd9ce0b7467eb49949cc7404174554f
-
SHA512
f8eb19fe49f0b1d8032df0eac5049a7bb602442272763d14c7630af7858859d17cad3357b4047d5ab1026ad3ef984e31d0430c6a9b4a99ec46619ce4707f29b2
-
SSDEEP
49152:GzMorAuvHzygQxs0ui4VuBmgbMP2Aa6dgmCPfH+y:MM76zssISKmgYNadXey
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3447fdf44a547edeaf5359483266413c_JaffaCakes118
Files
-
3447fdf44a547edeaf5359483266413c_JaffaCakes118.exe windows:5 windows x86 arch:x86
559ec13448c2a24a52e2bee7f41288b5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32First
Sections
Size: 16KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 219KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coiowxhs Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
evygcofz Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE