Static task
static1
Behavioral task
behavioral1
Sample
3b9e2d4f9c012472e0d53270b62249d8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3b9e2d4f9c012472e0d53270b62249d8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b9e2d4f9c012472e0d53270b62249d8_JaffaCakes118
-
Size
87KB
-
MD5
3b9e2d4f9c012472e0d53270b62249d8
-
SHA1
85a65f1cbf5af3fc265ee078a4d67cdc892eeb94
-
SHA256
4b0cc2ea6ae0959f4b4d4d400452a5e4f44c1a47aa224433fcff2209352b10c1
-
SHA512
5c5e6ff87099466238f8430101942d190e7ba2177b0a85e1be0abb5b1fc0f2e67b98bb04730c505c001a47f26c47eaa3c779c8a253ab338ad9712c309dfbd2e7
-
SSDEEP
1536:RIIg+5izLT7VRc8GlF5TxC7A9GM5RujA17RZH6UO7fjH0CoccpjVrs2ryrd1vUQT:RII5gzTVyn5P0aRu+RxZO7fX3cHs2qjj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b9e2d4f9c012472e0d53270b62249d8_JaffaCakes118
Files
-
3b9e2d4f9c012472e0d53270b62249d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
8464fe7b938a639f360bd1a826e29588
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileW
CreateNamedPipeA
GetPrivateProfileStructA
GetDriveTypeA
SetHandleContext
GetStringTypeA
GetUserDefaultLCID
GetStringTypeExA
WriteTapemark
RtlCaptureStackBackTrace
SetThreadContext
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE