Static task
static1
Behavioral task
behavioral1
Sample
3d1632bfa2e4ef06c8f371a908bb36b1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d1632bfa2e4ef06c8f371a908bb36b1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d1632bfa2e4ef06c8f371a908bb36b1_JaffaCakes118
-
Size
260KB
-
MD5
3d1632bfa2e4ef06c8f371a908bb36b1
-
SHA1
200827d4d7653ab14d67e774bac3d28b2a4e936d
-
SHA256
0bf507f5f01a64ac340ad05407434531696a34fac767a267db6e7c590705709a
-
SHA512
87c2c2ac60194398dde301b42141dd41612e36f854e39ce49a48f2818fba36e4b180903c4886f87f684a024c49c01dc0844bced3e1aa1b7613da034d7ac3d8ec
-
SSDEEP
6144:G0D6mrSJJ7dpDf0RJ2TNS42mDzH6KldIz1Rn/2:GgNrSJNf2J2hBzakCDn/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d1632bfa2e4ef06c8f371a908bb36b1_JaffaCakes118
Files
-
3d1632bfa2e4ef06c8f371a908bb36b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c2d3c56017ffc9f272aae4a4d190dcc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
Sections
.CryptX Size: 75KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CryptX Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CryptX Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 155KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CryptX Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CryptX Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE