Static task
static1
Behavioral task
behavioral1
Sample
3987d0cfbabc870815bf1a5c3dde4b49_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3987d0cfbabc870815bf1a5c3dde4b49_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3987d0cfbabc870815bf1a5c3dde4b49_JaffaCakes118
-
Size
133KB
-
MD5
3987d0cfbabc870815bf1a5c3dde4b49
-
SHA1
3dcb8ca2a0305bb83267f28ae062dd24ecea3662
-
SHA256
c57343e6839e5d009a27ec2355e94f2a3534bd224bdefd724ec3bcf13772f8ef
-
SHA512
255b2adab0217be8bd557b22402da797a52c98a8768dd16bb4a06ec0723522578e04450c8c365732e7b0825c1e239fc0dc8a49894c54ee5960d2081b9d29ad64
-
SSDEEP
3072:Vj1NsirOw4u/bQM8xAYV1iP+LPt0Twwyp+j5NiT:x1NpxUq8Uw0j5c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3987d0cfbabc870815bf1a5c3dde4b49_JaffaCakes118
Files
-
3987d0cfbabc870815bf1a5c3dde4b49_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 116KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE