Static task
static1
Behavioral task
behavioral1
Sample
3d49bd981c58db52af61f8ef569345f4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d49bd981c58db52af61f8ef569345f4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d49bd981c58db52af61f8ef569345f4_JaffaCakes118
-
Size
16KB
-
MD5
3d49bd981c58db52af61f8ef569345f4
-
SHA1
4faf73a9d63761bae94e697cd69570c5e67b9db0
-
SHA256
bdee2dcd4dfb4a367e85c5b54be8426f04591cb76b0c8a4c6e2dda1213128580
-
SHA512
18f3d183857446a81f3e96fe9f42985a9a73cea0c2d7307562e44e3e2bc3067090f2899c05bdded59efbeda9d46bc4a1ff2287bdbc72e769cb45906eb24d9c90
-
SSDEEP
384:LTAMPVFZ3yCNyEYlCJ6tH2nAlyeMs7nyRzajqkzM9EHuZT3j1ZZKajLdU:rV35NyVCJ6tH2nJw7yopuEHuhfZRL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d49bd981c58db52af61f8ef569345f4_JaffaCakes118
Files
-
3d49bd981c58db52af61f8ef569345f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE