Static task
static1
Behavioral task
behavioral1
Sample
3be76b4898166dbfa616a28edfa456ab_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3be76b4898166dbfa616a28edfa456ab_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3be76b4898166dbfa616a28edfa456ab_JaffaCakes118
-
Size
118KB
-
MD5
3be76b4898166dbfa616a28edfa456ab
-
SHA1
842ff0b8a3f5c46054d526a33a2f100eceb734cf
-
SHA256
c4822b534b8d0f11298e76dd21ccc64207d32fde2a4e9a331ced261cf3f4de87
-
SHA512
68cbfeeb6e2d3b61aefc7b3315c067fcfa580614d0120ef8b82d6c3b66cfbeaeb6a1e9d964f89de888140d243459048cc4db13405b7f3b0d7ab9bdaec5f6965f
-
SSDEEP
3072:8RaHox/bDgKDayzmxKsC4hphUBg6unPQZGGE24emrX5R:UAA/QKLNQphUBVpZGF24h9R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3be76b4898166dbfa616a28edfa456ab_JaffaCakes118
Files
-
3be76b4898166dbfa616a28edfa456ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
578efccbd440528d713563eccce9ee52
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupIterateCabinetW
ole32
CoUninitialize
CoInitializeEx
shell32
ShellExecuteExW
user32
wsprintfW
kernel32
GetModuleFileNameW
lstrcpyW
SizeofResource
GetLastError
WaitForSingleObject
DeleteFileW
CloseHandle
GetTempPathW
GetStartupInfoW
GetExitCodeProcess
ExitProcess
GetModuleHandleW
FindResourceW
LoadResource
CreateFileW
LockResource
WriteFile
Sections
.rdata Size: 1024B - Virtual size: 822B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 225KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ