Static task
static1
Behavioral task
behavioral1
Sample
3c1a315c45dde0e40c77be6fb40ccf40_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3c1a315c45dde0e40c77be6fb40ccf40_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c1a315c45dde0e40c77be6fb40ccf40_JaffaCakes118
-
Size
30KB
-
MD5
3c1a315c45dde0e40c77be6fb40ccf40
-
SHA1
5d53ae42ded889f3043074c16df82c27f318b4a5
-
SHA256
eb94351a3fadc54cad775002d7edd9f005194ef834689a5031845b25b0f5b01d
-
SHA512
435407cbe7e31a59b659d439e44aef6c48a1bc6d369da244d04f313c39d982af26b76c9912bb560b8decc0f4d9de9609c92b5e01515b6532e7871d6ba9907145
-
SSDEEP
768:RBXuWk50FjOIl1jxdr54t7JaRrRQt1j6tGImX9CazT:TkqldxQRsRE1j6tGPCav
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c1a315c45dde0e40c77be6fb40ccf40_JaffaCakes118
Files
-
3c1a315c45dde0e40c77be6fb40ccf40_JaffaCakes118.exe windows:4 windows x86 arch:x86
2ef258e53a4a0f0f5c4ca9e8699d6d0f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreateMappedBitmap
ImageList_Duplicate
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetImageRect
gdi32
ExtCreateRegion
ExtFloodFill
FrameRgn
GdiGetDC
kernel32
GetCurrentThread
GetFileSize
GetLocaleInfoA
GetOEMCP
GetProcessAffinityMask
GetProfileSectionA
user32
CloseWindow
CopyIcon
CopyImage
CreateCaret
Sections
.text Size: 29KB - Virtual size: 48KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE