Static task
static1
Behavioral task
behavioral1
Sample
3dfd19208281af64a8f3cd68a2bfcc93_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3dfd19208281af64a8f3cd68a2bfcc93_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3dfd19208281af64a8f3cd68a2bfcc93_JaffaCakes118
-
Size
108KB
-
MD5
3dfd19208281af64a8f3cd68a2bfcc93
-
SHA1
48537f209329aa6c9f31d8c239f1066abe10d55e
-
SHA256
1d20c6e0782daa86509669421406bd694b14958420b4f3ff144ceacd34c944cc
-
SHA512
f23ee490b9ddd60a827e644f22cd2f121fc206c3950a60708ee0f1c75cdde2b092e29596fee04b1cc1b6c63112db7d0223e6faa62b21c909b85171c7c890c04a
-
SSDEEP
1536:s2ELyDzabRfnvHTnAhC+tDJLZGPxiWMEVL:s5uDQfrnAp56Z9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dfd19208281af64a8f3cd68a2bfcc93_JaffaCakes118
Files
-
3dfd19208281af64a8f3cd68a2bfcc93_JaffaCakes118.exe windows:4 windows x86 arch:x86
69744ec7f833f92ed7315fb874483893
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord913
ord939
ord476
ord942
ord948
ord475
ord930
ord929
ord109
ord775
ord928
ord130
ord926
ord50
ord676
ord80
ord840
ord831
ord205
ord209
ord584
ord933
ord224
ord583
ord597
ord243
ord404
ord457
ord908
ord348
ord247
ord374
ord784
ord525
ord875
ord515
ord395
ord254
ord435
ord432
ord613
ord709
ord521
ord565
ord878
ord517
ord519
ord337
ord351
ord431
ord316
ord336
ord334
ord895
ord240
ord239
ord372
ord856
ord564
ord839
ord408
ord183
ord578
ord429
ord266
user32
ord435
ord159
ord346
ord452
ord350
ord457
ord572
ord199
ord512
ord438
ord197
ord152
ord268
ord677
ord377
ord635
ord477
ord276
ord444
ord274
ord256
ord644
ord97
ord269
ord555
ord596
ord195
gdi32
ord406
ord437
ord144
comdlg32
ord112
ord110
comctl32
ord22
ord17
mpegsys
ord51
mplex
ord1
ord3
ord2
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE