Static task
static1
Behavioral task
behavioral1
Sample
3b4754258a7e94835ad9b98d5a40ca77_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3b4754258a7e94835ad9b98d5a40ca77_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b4754258a7e94835ad9b98d5a40ca77_JaffaCakes118
-
Size
65KB
-
MD5
3b4754258a7e94835ad9b98d5a40ca77
-
SHA1
918766f06266da10ac5c0328d1ad41d7979ee1db
-
SHA256
4306d7a6ed47ee3bd51b6824afb025c145908338978f6bd5c88a51e6c335b6e6
-
SHA512
fe85ffc23cc89c1c500d89b6162dfe3daa13cfad095ea344b451107d07e9ad90a184ee8046fb52739c9646302de9035339dddae501124220f8ef489f97604ee8
-
SSDEEP
1536:vm9AFHs7ZwEN59r4JczNnHVP/GIrHKH32nuFgbdpP:vmCs7TNMJ4tGIjKHGnuOpP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b4754258a7e94835ad9b98d5a40ca77_JaffaCakes118
Files
-
3b4754258a7e94835ad9b98d5a40ca77_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
0 Size: 59KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE