Static task
static1
Behavioral task
behavioral1
Sample
3e20c9a5360c586821f838c850db79e7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e20c9a5360c586821f838c850db79e7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e20c9a5360c586821f838c850db79e7_JaffaCakes118
-
Size
96KB
-
MD5
3e20c9a5360c586821f838c850db79e7
-
SHA1
3036341251fdb03e11c6fbedc7c4844b094edb4c
-
SHA256
379cb1f276a94a5f9f6f4d02fb70f9c12bc03e67bd3ed8c401ab58799d1932b8
-
SHA512
03fc77c50c9b629cab535ea6ca32770d22b2efd1a3c73f59a3df4a11a2bb0ddbaf9ee72cca3981abfd0f13179d1e8d95d693a3f836881796864bf79dd458d0e5
-
SSDEEP
1536:Yv63fM482PbADzVtwmY9+RXqgJam7OP4S7vG4/k0eYBLOURj5GS7:Yv2fMUz6zVtzYi6gYm7cZs0dBKEtGS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e20c9a5360c586821f838c850db79e7_JaffaCakes118
Files
-
3e20c9a5360c586821f838c850db79e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
b74976a1362e984770204ccfa232ea85
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
CloseHandle
lstrcmpA
GetStringTypeExA
OpenThread
VerifyConsoleIoHandle
FindNextVolumeMountPointA
VirtualQuery
IsValidCodePage
MapViewOfFile
GetComputerNameA
GetCommandLineA
GetStartupInfoA
ExitProcess
CloseConsoleHandle
GetCalendarInfoA
HeapSummary
CreateHardLinkA
HeapSize
GetFileAttributesExA
WriteConsoleA
CloseHandle
Sections
.itext Size: 4KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.date Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
WEIJUNLI Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA