Static task
static1
Behavioral task
behavioral1
Sample
3e3fa91008d41b291eda2603112fc94b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e3fa91008d41b291eda2603112fc94b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e3fa91008d41b291eda2603112fc94b_JaffaCakes118
-
Size
13KB
-
MD5
3e3fa91008d41b291eda2603112fc94b
-
SHA1
79c1c5aee2f3e45f26b0426336affd182358f15a
-
SHA256
75ad34f1161db5c14128e5cd593f7f03d3dbb0ba5ea29495e1551b3c1ef887c1
-
SHA512
64b063433bb624a2ef7268cafd971729cff0dbaf1f813039f52a201b1f2bc361f5a71f80b9073ec277591ac7f2010148bd5cf364370025ac781dea66ca708021
-
SSDEEP
192:8B7MwFrpbqgo4nHN0UKWEUFSZkLNJq8tb+GOE5mz0cHNwiuO786my6tUM:zgoc0p8FlNoNwiuOA6T6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e3fa91008d41b291eda2603112fc94b_JaffaCakes118
Files
-
3e3fa91008d41b291eda2603112fc94b_JaffaCakes118.exe windows:4 windows x86 arch:x86
d0626bb655c0c7084048b9402dfbbbae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__threadid
__toascii
_adj_fprem
asin
_chdir
_atodbl
kernel32
FreeVirtualBuffer
FindResourceA
GetBinaryTypeA
GetCommandLineA
GetConsoleCP
GetConsoleFontSize
Sections
.text Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE