Static task
static1
Behavioral task
behavioral1
Sample
3b602cfc40e4849e36365cf8486d6dde_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b602cfc40e4849e36365cf8486d6dde_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b602cfc40e4849e36365cf8486d6dde_JaffaCakes118
-
Size
30KB
-
MD5
3b602cfc40e4849e36365cf8486d6dde
-
SHA1
e3b6de04afc81925d830af28a7eefdddacbd7cb4
-
SHA256
c2d3b5778a550d704683cec1c7e3771eb35791569fd4aa9c5317f9e04f10c153
-
SHA512
89609256d5e2bcc92eebd75797c2fa33d021a99a7ef2ee3e718e8b7b12223d402952e2f0c7ad715a02c2e3109b186d378c7b5cec32a95635bbcf9c0b6f169024
-
SSDEEP
384:+PoAQ8VUVdE29PB5+XLrhx2xAp8yhPHGQZ5+eebNAHZgTqBr:+PvUVjf4XZb8avG05+8iG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b602cfc40e4849e36365cf8486d6dde_JaffaCakes118
Files
-
3b602cfc40e4849e36365cf8486d6dde_JaffaCakes118.exe windows:4 windows x86 arch:x86
49a712f1ee495aa0e0fd85cbcbdd437e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushViewOfFile
SetConsoleTextAttribute
CreatePipe
SetThreadPriorityBoost
SetCommTimeouts
ReadConsoleA
CreateTapePartition
HeapSize
RegisterWaitForInputIdle
GetCPInfoExA
GetConsoleAliasExesLengthA
GetNumberOfConsoleFonts
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
text Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: 22KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ