Static task
static1
Behavioral task
behavioral1
Sample
3acc24cb25f8db31fbc7543f0b698838_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3acc24cb25f8db31fbc7543f0b698838_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3acc24cb25f8db31fbc7543f0b698838_JaffaCakes118
-
Size
217KB
-
MD5
3acc24cb25f8db31fbc7543f0b698838
-
SHA1
2c67611d8530bb068b8a4e031499d672846fd81b
-
SHA256
9a73eb05f0943058e054ee85af14370bde1ebecb2ac00631dc85ba280a08ce13
-
SHA512
69ffee55a1c373875a8578d4e502134cd6471d3ebe8cea99a9691465bb5b615f0744187578dedba798f60344ead1117b637cd005a9800e432d879abce2fb9f96
-
SSDEEP
3072:O7E2fmSheTKNoS2dsjHF5tVgoF3PdEsXih6qR7+i34VObwyRVsT6r3+gw2R:l+NJ2+jHF5tVgAGsyQRJOUyRSTuugw2R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3acc24cb25f8db31fbc7543f0b698838_JaffaCakes118
Files
-
3acc24cb25f8db31fbc7543f0b698838_JaffaCakes118.exe windows:4 windows x86 arch:x86
d258db4bf6f80a6cf0500ffa172d28bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit
kernel32
SetSystemTime
RemoveDirectoryA
SearchPathA
CompareFileTime
GetProcessWorkingSetSize
GetModuleHandleA
GetStartupInfoA
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ