Static task
static1
Behavioral task
behavioral1
Sample
3de54bd6253def2611c700788a40e6fd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3de54bd6253def2611c700788a40e6fd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3de54bd6253def2611c700788a40e6fd_JaffaCakes118
-
Size
111KB
-
MD5
3de54bd6253def2611c700788a40e6fd
-
SHA1
18228b64e76222f731ff235d7e26c0df0f290c1f
-
SHA256
8fbdefa0876e0579fff6460c8f9e176aa4f54eeaf9b242bd57a980f148822c2a
-
SHA512
d10da1b282222bf977c92e611fbdeafb434e6882370430c34357b802e17e1bdb0c5aa7a98dceb800c64d96054a1c729b7cbccf00f38d8a387bb14b89c7ab06e5
-
SSDEEP
3072:yCINPuw19fLKMa8pHSLZi3an9DyOwTJOm8eRHp:GvB9pyLZm8DyfcpoJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3de54bd6253def2611c700788a40e6fd_JaffaCakes118
Files
-
3de54bd6253def2611c700788a40e6fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
1327cc73e3b0bae24c2e2f73285a0476
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
GetModuleHandleA
VirtualFree
ExitProcess
Sections
.text Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 173B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dsfwer Size: 4KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE