Static task
static1
Behavioral task
behavioral1
Sample
3b8a9d9da8f6e9c526f1ae0d0dee859b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b8a9d9da8f6e9c526f1ae0d0dee859b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b8a9d9da8f6e9c526f1ae0d0dee859b_JaffaCakes118
-
Size
8KB
-
MD5
3b8a9d9da8f6e9c526f1ae0d0dee859b
-
SHA1
2a1e3a9399b4e2d8f9462ddadf17b85cf5f9fdc1
-
SHA256
d390ad5ed0eca48fd878360de1ead84d2b82f4d40e17f961d59e916a63be5a50
-
SHA512
1f0002e71b54b289de6d8164d0d6021465b58dced564ba912038b22ee6ad702199a67f8e8d5d794428dfd5b3eea83993d52610b796aa2a96c8129127e79cfa7f
-
SSDEEP
96:5dk491Sp4hJCyV7nS62sQC4o4fOYyTSzm9izZp43Z9N8PJ:zR964bCyV7SM4o4feeEEZpaHUJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b8a9d9da8f6e9c526f1ae0d0dee859b_JaffaCakes118
Files
-
3b8a9d9da8f6e9c526f1ae0d0dee859b_JaffaCakes118.exe windows:4 windows x86 arch:x86
12ae5f7e40332ef0e351e4f536f4911b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strlen
_getch
malloc
_strlwr
strcpy
strcat
strcmp
kernel32
FindResourceA
GetCommandLineA
GetModuleHandleA
GetStdHandle
CreatePipe
SetStdHandle
GetCurrentProcess
DuplicateHandle
DeleteFileA
WaitForSingleObject
CreateProcessA
CreateFileA
GetModuleFileNameA
GetTickCount
LockResource
LoadResource
CloseHandle
GetTempPathA
WriteFile
user32
LoadStringA
wsprintfA
shlwapi
StrToIntA
Sections
.bss Size: - Virtual size: 40B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ