Static task
static1
Behavioral task
behavioral1
Sample
3d63058939efe6b517e4d4c07e9abd4b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d63058939efe6b517e4d4c07e9abd4b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d63058939efe6b517e4d4c07e9abd4b_JaffaCakes118
-
Size
13KB
-
MD5
3d63058939efe6b517e4d4c07e9abd4b
-
SHA1
705090bea99ec1ecb4245f9ffc9ffacbcc3695f8
-
SHA256
65348b23df6f99a98793f3adb907829bbe3d304b6b09b9181ad86e13a5da5dc0
-
SHA512
68fcd37dfbd6b8531ebcb5bd05a4297bceb7cae5d7a2a474b2e4c378b7eb6f13f0a661794ed63768bfd8beac679cb7ac52b51b309db049e1a66a091f7ea49503
-
SSDEEP
384:PA7PFzLjZfro7IG8JbiHnkofIV13AN0YX4wbTw:PodzvZfrMceH9a1w6r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d63058939efe6b517e4d4c07e9abd4b_JaffaCakes118
Files
-
3d63058939efe6b517e4d4c07e9abd4b_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 3KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE