Static task
static1
Behavioral task
behavioral1
Sample
3f14978760247b6cf3e949e6b01d5545_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3f14978760247b6cf3e949e6b01d5545_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f14978760247b6cf3e949e6b01d5545_JaffaCakes118
-
Size
40KB
-
MD5
3f14978760247b6cf3e949e6b01d5545
-
SHA1
c0a094e995c4146322bb6394d2395a91c5510910
-
SHA256
9044701bf0b67196f7cea60c1ef27917cd7364f8311997ea36f7144c38405b1d
-
SHA512
1b7f1df4a02fd498f354446c8530856496816647de00fa87de4fbe6e534f659d3d0681ef1d44255cfed768007b67853d2639152a8a586232a5614ed4e49a5afd
-
SSDEEP
384:wyVVS7GcmRvMtZ0H0OTvTCYqnIDWCi62DVyYbMcDcdoNFRiu25L:wyrRvMw0OTuYtaCdqyY4coKRvG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f14978760247b6cf3e949e6b01d5545_JaffaCakes118
Files
-
3f14978760247b6cf3e949e6b01d5545_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
.text Size: 24KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pediy Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE