Static task
static1
Behavioral task
behavioral1
Sample
3c40c710ac2d6c38edde478692d7c159_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c40c710ac2d6c38edde478692d7c159_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c40c710ac2d6c38edde478692d7c159_JaffaCakes118
-
Size
346KB
-
MD5
3c40c710ac2d6c38edde478692d7c159
-
SHA1
cb0440a9336fdf4ad4e7e794602b17fa1044df9d
-
SHA256
fcc331c8bd407736c0597d54175678113a56d4a3052faf2b2ff8391bcd26453d
-
SHA512
92b6e05830d61da697ff7177cf4ab723ed5de3cb970ff73b54cd4ab64301a4838174bebe0661ca105429c5074e67bd1703b1a4126e18a78c5fb44ee1132b6dbd
-
SSDEEP
6144:+KU3YqKi2dpAAgO9nHUVEi+9nkHBFTI4ZMNHaTNPJRP+I8ZtnRVd/T+HvIdCb:+v3RKi2dpAE5HGKkh9ZMN6NbP+I89y2C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c40c710ac2d6c38edde478692d7c159_JaffaCakes118
Files
-
3c40c710ac2d6c38edde478692d7c159_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd227ba966c127e93fe82f25f211eaca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree
user32
wsprintfA
MessageBoxA
Sections
.data Size: 339KB - Virtual size: 616KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_rsc Size: 96B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ