Static task
static1
Behavioral task
behavioral1
Sample
3ceb377a7aa979d6031c67f145fc5ab6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ceb377a7aa979d6031c67f145fc5ab6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ceb377a7aa979d6031c67f145fc5ab6_JaffaCakes118
-
Size
384KB
-
MD5
3ceb377a7aa979d6031c67f145fc5ab6
-
SHA1
2088bb1b9ac2973c93e6a7e1d73048d708c04c20
-
SHA256
5eaa6db955e6c13e326e265b6b0a28eeaea54266de13f438276bcf008d278f99
-
SHA512
6c3ecab20688c979d249e254309ef15ff24c3572f46de8f6a59f686e6779972c40bd4b559a526252ea1cb661b8d00308d4b085954a7978f79993e5fb8ee39a80
-
SSDEEP
6144:GeUe/M6vNHll9N9ZAXbDNBaYpMnZNwRnpIzE/3bguNYJQL7kVyJflHjPqagpo:G6MoHlV9ZEBxSnZQpIzY3kuNwUPqVpo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ceb377a7aa979d6031c67f145fc5ab6_JaffaCakes118
Files
-
3ceb377a7aa979d6031c67f145fc5ab6_JaffaCakes118.exe windows:4 windows x86 arch:x86
090b6a211f8ec2858536f31474137c9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
CloseHandle
CreateProcessA
DeleteFileA
GetTempFileNameA
WaitForSingleObject
GetTempPathA
msvcrt
fclose
fwrite
fopen
sprintf
strrchr
_snprintf
setupapi
SetupIterateCabinetA
Sections
.text Size: 382KB - Virtual size: 382KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ