Static task
static1
Behavioral task
behavioral1
Sample
3a9b056c0f6e767f0e8f51e4ecfda6a3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3a9b056c0f6e767f0e8f51e4ecfda6a3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a9b056c0f6e767f0e8f51e4ecfda6a3_JaffaCakes118
-
Size
18KB
-
MD5
3a9b056c0f6e767f0e8f51e4ecfda6a3
-
SHA1
3ea6a0531c06b65015a1ac297224b80dd26a2975
-
SHA256
aa1bc0eef0806b9e2e5d073872f95ee8ade41e561cb800df0ea7aa8c7109f603
-
SHA512
3808abab49f1a538c3dedb0158d2d5e96b845b39355cd1a733cfa67526898e935461c437f9d054cbc78e6a637d837dd881f33310ab6ca44c2d9337e8ec1a4dc6
-
SSDEEP
48:QMIIILeOnNgg1EEWsiryoizX6U9CBanlEP+/y6CXduvdHyRIpm4H3AVauwOL9xCl:QjNgOAi4vwFSRh/9x1gajwF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a9b056c0f6e767f0e8f51e4ecfda6a3_JaffaCakes118
Files
-
3a9b056c0f6e767f0e8f51e4ecfda6a3_JaffaCakes118.exe windows:1 windows x86 arch:x86
4b319f45f968717911f6f62acc332376
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
CreateProcessA
GetModuleFileNameA
LoadLibraryExA
ResumeThread
VirtualProtectEx
WinExec
WriteFile
WriteProcessMemory
Sections
.idata Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE