Static task
static1
Behavioral task
behavioral1
Sample
3cd84d6297612b046950d8678fb6c628_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3cd84d6297612b046950d8678fb6c628_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3cd84d6297612b046950d8678fb6c628_JaffaCakes118
-
Size
368KB
-
MD5
3cd84d6297612b046950d8678fb6c628
-
SHA1
670d8377e83961ffdd9af4bb1eb03f0dd82ef99c
-
SHA256
d7264aa6821bb31e9833138cdc3c7117b9f086fa8ef536ad767f7a7c091ca99c
-
SHA512
b8f4a8b2267479a970f9c45b380ea08e466bccb7c57b477ed66214a66d2e1afa9ca1cd4494d89638861d4e98e409f65ddeb4b6b315c6559460cf49e375ebf16b
-
SSDEEP
6144:Iv3Wn4iQ9h43ts/oCjtVvTLjswOpFIBa3wYdQLOViKDDK6BRLskKclL4goA3rI:I/Wn7gh4C/om7bLGGBaldQgD2cWYl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cd84d6297612b046950d8678fb6c628_JaffaCakes118
Files
-
3cd84d6297612b046950d8678fb6c628_JaffaCakes118.exe windows:4 windows x86 arch:x86
7b2bf80b121f571eeeab79a447c87dfc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
LockResource
VirtualAlloc
VirtualFree
CreateFileA
GetTempFileNameA
GetTempPathA
CloseHandle
LoadResource
GetTickCount
SizeofResource
FindResourceA
LoadLibraryExW
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 300KB - Virtual size: 299KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ