Static task
static1
Behavioral task
behavioral1
Sample
3a98e207a9abd95e6ce6c268f7dcb254_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a98e207a9abd95e6ce6c268f7dcb254_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a98e207a9abd95e6ce6c268f7dcb254_JaffaCakes118
-
Size
56KB
-
MD5
3a98e207a9abd95e6ce6c268f7dcb254
-
SHA1
1c53df033ada3879394b3e0436a1b3ec316d170a
-
SHA256
f730243d1c410d793669fabcd5cc035298529c31d419a603859684e6f71497a0
-
SHA512
77c7cb03165d04695ee0a771e08f143f2121e18e69d2a8403d120970772e11aa908244c1b5996c508e37082c4b445fa311fa53713dcaff23c430ccb0dabdf57b
-
SSDEEP
1536:jpOYeX/ZXtK0bk4p96b7GAGXHZj6hRQvNo8baH9x+:jpOYeR9Kz436b6AGXH96zaNoLHW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a98e207a9abd95e6ce6c268f7dcb254_JaffaCakes118
Files
-
3a98e207a9abd95e6ce6c268f7dcb254_JaffaCakes118.exe windows:4 windows x86 arch:x86
f98e470716e866c9f1f6f235a03080f1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetProcAddress
LoadLibraryA
VirtualProtect
user32
ChildWindowFromPoint
GetWindowLongW
OpenClipboard
TranslateMessage
Sections
.code Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 702B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rel Size: 40KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE