Static task
static1
Behavioral task
behavioral1
Sample
3b256ca0865563e2dc1d6b23fe8a801f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3b256ca0865563e2dc1d6b23fe8a801f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b256ca0865563e2dc1d6b23fe8a801f_JaffaCakes118
-
Size
57KB
-
MD5
3b256ca0865563e2dc1d6b23fe8a801f
-
SHA1
75bc0e761ec9206c1950a46e89f969e64e7874c1
-
SHA256
4ee2b149364c72d90f193a02610e80deae513b713e6e1aa3751f7c640272df88
-
SHA512
857f92a3403623563b78273e22825229b0b5486e0f81a6e6f8ef3f6830f79f351dedb80b2626e6472f7c1516bbb62035146e0f07c90b3a5bf04ebc33ebdec428
-
SSDEEP
1536:Bhjcle6b2tDN0OE2ocz6aZLF0nGZZuPaY0md7otYomuzh5+y:bclItD6OE2oczpOGLuJ0m9otYo3zqy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b256ca0865563e2dc1d6b23fe8a801f_JaffaCakes118
Files
-
3b256ca0865563e2dc1d6b23fe8a801f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 47KB - Virtual size: 684KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE