Static task
static1
Behavioral task
behavioral1
Sample
3c1ede3cc40e90cfd766154630668f81_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c1ede3cc40e90cfd766154630668f81_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c1ede3cc40e90cfd766154630668f81_JaffaCakes118
-
Size
235KB
-
MD5
3c1ede3cc40e90cfd766154630668f81
-
SHA1
03bcbdbe7536ee1826268d346baa1d0d9ce83a5d
-
SHA256
880bd9bee349ecfd8d56149014b17a49e39c21f47dc3b1f63b354671b23367b4
-
SHA512
6e6ac40a8be9cda11035ae92f89bc76511a4b0dd4077c17ec689342d70203ca15ed9724f39a7b587b06b9e6b5bc6a617eab4cf362347f2190e93a53ac8faa875
-
SSDEEP
6144:piOdmVD2/xshuN3hbx2zTe9X5wgoTRlSzC9wTvarQIiHZ:piOdJdNRbx2XebfoNlSh4QIi5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c1ede3cc40e90cfd766154630668f81_JaffaCakes118
Files
-
3c1ede3cc40e90cfd766154630668f81_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 225KB - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE