Static task
static1
Behavioral task
behavioral1
Sample
3a851265275a8bc4e0468c71bcab777c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a851265275a8bc4e0468c71bcab777c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a851265275a8bc4e0468c71bcab777c_JaffaCakes118
-
Size
2KB
-
MD5
3a851265275a8bc4e0468c71bcab777c
-
SHA1
20584f430b0a3e4e2c41565720606091f0c77fd8
-
SHA256
043b6cd46d4775c2dc1e503afdcd7c305783075ef5e05b8f3228dde5e66dbe55
-
SHA512
1a5df0f850a0b2864155e44ed1be12dfa58ec3e9484af8e52e29a8d486405e5904382fc42b7338a5aa471e685cd45e98c90a13af2a2aeae4007c93254cd9f7f4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a851265275a8bc4e0468c71bcab777c_JaffaCakes118
Files
-
3a851265275a8bc4e0468c71bcab777c_JaffaCakes118.exe windows:4 windows x86 arch:x86
4cc4aa8c580b980b50c5226d5bbc1947
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
msvcrt
_snprintf
rand
shell32
SHGetSpecialFolderPathA
Sections
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE