Behavioral task
behavioral1
Sample
3b1744ddc8b0517821e937e1c4aeac1e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b1744ddc8b0517821e937e1c4aeac1e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b1744ddc8b0517821e937e1c4aeac1e_JaffaCakes118
-
Size
13KB
-
MD5
3b1744ddc8b0517821e937e1c4aeac1e
-
SHA1
ff970892f949a962f7b990aeb1521bcd951961fe
-
SHA256
d0110af26e281c8b418e1fb946a941efe3dac19c5dd1251188884293035b21ef
-
SHA512
ea525a0deabc0d760fae591dd7efe5e91d9eb42c53e972f50211d5d0503d26797f104256f9a200a9e03dafa288395bd0ae0805520417ea52ae816fd655be3f5d
-
SSDEEP
96:44LJnhDf1v1cmlQlZHDZ4/d1e50LIdBOw8tXN34Kz:tFG6/dE6wOw2doKz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b1744ddc8b0517821e937e1c4aeac1e_JaffaCakes118
Files
-
3b1744ddc8b0517821e937e1c4aeac1e_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
b2793da8c5edf7dabcbf59fa0d47781b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
Sleep
GetCommandLineA
CloseHandle
GetEnvironmentVariableA
ExitProcess
CreateFileA
CopyFileA
lstrcmpiA
lstrcatA
lstrlenA
advapi32
RegDeleteKeyA
RegCreateKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
user32
MessageBoxA
Sections
UPX0 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE