Static task
static1
Behavioral task
behavioral1
Sample
3af68d6965dcfe89e0575763d33682a1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3af68d6965dcfe89e0575763d33682a1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3af68d6965dcfe89e0575763d33682a1_JaffaCakes118
-
Size
40KB
-
MD5
3af68d6965dcfe89e0575763d33682a1
-
SHA1
51cc25384656a439627f6ae617665908d381ed3a
-
SHA256
bd149ff0d7e02ed1e8beda45738d6314a8216d7916c5e44e4e65b625b3886158
-
SHA512
7e1b81433db2444612697a82f34742278381055f7013cf3a3896d837b3e82b5f6dd83a6abe189140e001d49341c2104f2b13f006b986b4a0f450189b5b5c436d
-
SSDEEP
768:eG62u5UValpycNC53rAb619s+iohISbpajkc+NxQsLpq+e/asrs1m8:eG6PBpBN0Ub9+iUpasNTw+hsrkm8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3af68d6965dcfe89e0575763d33682a1_JaffaCakes118
Files
-
3af68d6965dcfe89e0575763d33682a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
b689e0cc7302017197a86e7af4e09e5f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
CreateFileA
VirtualAlloc
VirtualProtect
GetModuleHandleA
Sections
.text Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ