Static task
static1
Behavioral task
behavioral1
Sample
3d954b0df07d27316cb85aaa95142400_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3d954b0df07d27316cb85aaa95142400_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d954b0df07d27316cb85aaa95142400_JaffaCakes118
-
Size
103KB
-
MD5
3d954b0df07d27316cb85aaa95142400
-
SHA1
d4be4fa400f3e6dd655213688033f144f7ae46dd
-
SHA256
1dface6b7e6475bbb507cf770871eff1d471c3440bf7a5f53cb596b59371f31d
-
SHA512
e8c34879686e59744f27536d4df0025282d8e66e4562c2e38b81a35ed3f16a3b3b07f5fa709efde6fd0c6d9dd254b2f9591031f2b005d8c6ccade4a9b44b627c
-
SSDEEP
3072:gk88eFVXwuNjwUCnZuVYMjBAkllqZdgprDn7Lp3a:gk8ZFXNjwUCnZu6GAkllWdkg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d954b0df07d27316cb85aaa95142400_JaffaCakes118
Files
-
3d954b0df07d27316cb85aaa95142400_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 99KB - Virtual size: 981KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE