Static task
static1
Behavioral task
behavioral1
Sample
3bbb62d1782d9b93a8f5e4cd5d2c492c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3bbb62d1782d9b93a8f5e4cd5d2c492c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3bbb62d1782d9b93a8f5e4cd5d2c492c_JaffaCakes118
-
Size
21KB
-
MD5
3bbb62d1782d9b93a8f5e4cd5d2c492c
-
SHA1
9a2e1de753b36351041ffc0679d6abab416c816b
-
SHA256
d6168dd47c78b2d776c0dfd4bf411b9b18a3a071f38ea5e0a840663b71fe051f
-
SHA512
15704b26659656087fd9f1a6fb55307e4f01fd92c07c1149c7270562732759e76ce5cfb15b1292e0cc47f74541b7e68a4efd0e5d0bf919d88596d70fee181b3f
-
SSDEEP
384:vzL18qNN/ZPpp/vmXG9aoJGnE4iDtJDYnc8:vzLSqr/ZPpxnIE4ixJcnc8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bbb62d1782d9b93a8f5e4cd5d2c492c_JaffaCakes118
Files
-
3bbb62d1782d9b93a8f5e4cd5d2c492c_JaffaCakes118.exe windows:1 windows x86 arch:x86
e6ed844be4beb57ff8078e7326fde044
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryW
GetDiskFreeSpaceW
GetFileTime
GetLocaleInfoW
GetNamedPipeInfo
GetProcessHeaps
GetProfileIntW
msvcrt
_cgetws
_chkesp
_logb
_dstbias
_eof
_errno
_execl
Sections
.text Size: 11KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE