Static task
static1
Behavioral task
behavioral1
Sample
3cb71a77c0c95b4b7e9b773da2b63c41_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3cb71a77c0c95b4b7e9b773da2b63c41_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3cb71a77c0c95b4b7e9b773da2b63c41_JaffaCakes118
-
Size
56KB
-
MD5
3cb71a77c0c95b4b7e9b773da2b63c41
-
SHA1
42d8938fd0bb9d31e5b5e8b663978289d672794b
-
SHA256
b62a69dc339b7bea9c50625e0d374c733902ac61a2465830a6ead2a7211f6fd3
-
SHA512
2ab6e2f3b85aecd45c37ae90968639d599f8f5eb1e6dcf7676af3ac9c6a63f3f2e8d6641cbca3e70aa4f71a4fd3a1d4eaa1629f1fb98d0e2f23b699d3c42c785
-
SSDEEP
1536:6TdytmznUkJTbcBPQtXCUP5rKdQz4nBxP5lCtda:Udy0znnbpDlszmtM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cb71a77c0c95b4b7e9b773da2b63c41_JaffaCakes118
Files
-
3cb71a77c0c95b4b7e9b773da2b63c41_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 48KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE