Static task
static1
Behavioral task
behavioral1
Sample
3bbd9f5438c44d493598b5ae3aabfea0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3bbd9f5438c44d493598b5ae3aabfea0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3bbd9f5438c44d493598b5ae3aabfea0_JaffaCakes118
-
Size
776KB
-
MD5
3bbd9f5438c44d493598b5ae3aabfea0
-
SHA1
28a42d8ece248f73dd8b8b14461a6a05f3da26e9
-
SHA256
3f9efefd1da966a8b67fedade0baa17abe079d80e553400a2e2b4cdeae09b909
-
SHA512
f5329c6db9d5c48919b094e84efde7a0b13cdd53039bea469d3cb8d475903799be7ad94e6d6dd7006591227530d6a5e6e0cf17d6b2159fd3f32719a28fb2ef61
-
SSDEEP
12288:KVJW32jSxVIACmLfdxF5vfEn1Mnulwys5:KK2iCmLBJfsxO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bbd9f5438c44d493598b5ae3aabfea0_JaffaCakes118
Files
-
3bbd9f5438c44d493598b5ae3aabfea0_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d8e9e06f8e51550e3e5089179e9846d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sections
CODE Size: 600KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccg Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE