Static task
static1
Behavioral task
behavioral1
Sample
3c43426dcabfac374aba2dbf3cf1d583_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3c43426dcabfac374aba2dbf3cf1d583_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c43426dcabfac374aba2dbf3cf1d583_JaffaCakes118
-
Size
97KB
-
MD5
3c43426dcabfac374aba2dbf3cf1d583
-
SHA1
14ad8461afcb982ce18d9ec5b55f9490c0a7cff4
-
SHA256
3c617f61bd44f63a19c7b0de688ddd8c221e2b9bc84e42f097a33551472f6ca1
-
SHA512
b25200cebc744971f1bc565e8ca08dc8ddea05ad57876c916dfb877b6e107b730ad49ecb99b2f52e9888fab6b463f3ca8daed6d9a9c5035be0afc548ec518041
-
SSDEEP
192:zRL4ciUmuyVgQ/TV0MNQNHm/TOIOfyXa57tfCTzZtL71O1GX7qLZk:t4ciUmuw0S4SyIPXI4TdtL7l4k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c43426dcabfac374aba2dbf3cf1d583_JaffaCakes118
Files
-
3c43426dcabfac374aba2dbf3cf1d583_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mjg Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE