Static task
static1
Behavioral task
behavioral1
Sample
3cb127681d655553675af725dd2f697f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3cb127681d655553675af725dd2f697f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3cb127681d655553675af725dd2f697f_JaffaCakes118
-
Size
52KB
-
MD5
3cb127681d655553675af725dd2f697f
-
SHA1
4ad21b46fe169191c65461c229f98506d9af749d
-
SHA256
07d08829f3524cd4891c28e0b20924ec866a55d9c612e0855da468f349933212
-
SHA512
6a1ed87cc318aa8de906e541eb1300ade34af12fe2a4e0e2e353d4c9b93b52600d082149cd96c0863bce8a5ffd19804900b0a9e4c14d21957130ef61fbba664b
-
SSDEEP
768:fFq0WmpKrEnIRPHgLdGPoUx9VigP3KIgjrw5uV6RdH7GKL94:fLW4UIwAUDVTP3KPrw5uERgK54
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cb127681d655553675af725dd2f697f_JaffaCakes118
Files
-
3cb127681d655553675af725dd2f697f_JaffaCakes118.exe windows:4 windows x86 arch:x86
4c71388e384fa8d26ecec1f0da9a7e67
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToCacheFileA
ReleaseBindInfo
CompareSecurityIds
DllRegisterServerEx
ntdll
LdrShutdownThread
ZwSetInformationProcess
KiUserCallbackDispatcher
LdrLockLoaderLock
Sections
.text Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE