Static task
static1
Behavioral task
behavioral1
Sample
3b5a664200d14e250e92a8fdc358613b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3b5a664200d14e250e92a8fdc358613b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b5a664200d14e250e92a8fdc358613b_JaffaCakes118
-
Size
127KB
-
MD5
3b5a664200d14e250e92a8fdc358613b
-
SHA1
d22bfd9e57ed4009692f20c1d4f9b6ae864502a4
-
SHA256
91c04355e998b9ace72b80adfb112e94ff61ae28b858024a3fc3a5b0a9a55d6d
-
SHA512
b9e8f7b6890a965de1c55e9eb89e6ded696f4fb902b396b0181f17c04fd2bff0a8e31150d18b88a181b8d596b27c240926b4346485e6f7650efd8bde0f704915
-
SSDEEP
3072:kX+dXw64s19/SN+rhBwUHosQ65rOKbtAFEW4nzO:kX+y67SNOB6sfb4mzO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b5a664200d14e250e92a8fdc358613b_JaffaCakes118
Files
-
3b5a664200d14e250e92a8fdc358613b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f35da0feaeb1ea3121dbe4b43d43d5fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntExA
kernel32.dll.
LoadLibraryA
Sleep
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE