Static task
static1
Behavioral task
behavioral1
Sample
3d69981ac19e3f19f3ef94c08d44050d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d69981ac19e3f19f3ef94c08d44050d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d69981ac19e3f19f3ef94c08d44050d_JaffaCakes118
-
Size
43KB
-
MD5
3d69981ac19e3f19f3ef94c08d44050d
-
SHA1
3b61209a06f0339b539d6b6de92012a0147892a4
-
SHA256
9d9697fd1c93578ca154739ff9fdf82f28d05955e13f903a522ee750e389c348
-
SHA512
b67ed220fbf9c3ca550862f7b810c98b55b8232a57e539b5235347d12e7c99220b47e9dd8a06eb883eb0775b2e140d4d018a86bf8975c08287af269b6b494de0
-
SSDEEP
768:4hHbcbZVe51ofvNEX1XyTXHVC9O6FvwUdJ4hJCpyRJ/YiOgJgX3kaNEzmuu7v4nT:4hH885iIyz02v3f9UCzu7vCKfg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d69981ac19e3f19f3ef94c08d44050d_JaffaCakes118
Files
-
3d69981ac19e3f19f3ef94c08d44050d_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 42KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE