Static task
static1
Behavioral task
behavioral1
Sample
3caa3224c2aeac290e969855e3fc5be4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3caa3224c2aeac290e969855e3fc5be4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3caa3224c2aeac290e969855e3fc5be4_JaffaCakes118
-
Size
150KB
-
MD5
3caa3224c2aeac290e969855e3fc5be4
-
SHA1
273f84a468119a1d37d2d87d7f1e6628903d6fcc
-
SHA256
c730a9cc428e5e353c4469d9b9e3741d44eb27fe76bb2a1e1061ffc72153c81f
-
SHA512
dd95f18cf1ca23c9357c786303c75aa41df49941bde5ca65bc493a1689e953c8f56c9a8f751478b9c7b498532b7c0dd14e6629cc49c2b25633d3b4155902eb08
-
SSDEEP
3072:tlxAxiiAYXRJ1cbuR3m8KoNVzbqQ+yaKf4baDJws3wDH:tePXD1zQuNV1+yiH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3caa3224c2aeac290e969855e3fc5be4_JaffaCakes118
Files
-
3caa3224c2aeac290e969855e3fc5be4_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 140KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE