Static task
static1
Behavioral task
behavioral1
Sample
3f41ee95fd719e37e05581657b341968_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3f41ee95fd719e37e05581657b341968_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f41ee95fd719e37e05581657b341968_JaffaCakes118
-
Size
38KB
-
MD5
3f41ee95fd719e37e05581657b341968
-
SHA1
91e280ddb7cf2572bc200142eb431befe152e430
-
SHA256
159dea8f6c73395c5e308796afb2d1583c4e04dc264b9d3f0c6a613be0fb60b7
-
SHA512
0902480cf36d8015099de927342e9564bf3c1377e4ba8170051c0496a00257a8367bc1eea18bf22f2e70216e4fbb9f333c38886fbb1488c8778fe768506ff52f
-
SSDEEP
768:R0lp0IQOzEOG3AXB6VjiJ8wOppN+hxDizzyNdKdvE+iiHnS4vGnMOyglFh1Jn:RW7QOzExQkV+O/pOhxDezyNdKDGnMOyq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f41ee95fd719e37e05581657b341968_JaffaCakes118
Files
-
3f41ee95fd719e37e05581657b341968_JaffaCakes118.exe windows:4 windows x86 arch:x86
119ba01abad812c4a461368344bcd6cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlZeroMemory
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.pepsi Size: 31KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE