Static task
static1
Behavioral task
behavioral1
Sample
3e67f72ed15c009c459e8dd641c70239_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e67f72ed15c009c459e8dd641c70239_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e67f72ed15c009c459e8dd641c70239_JaffaCakes118
-
Size
317KB
-
MD5
3e67f72ed15c009c459e8dd641c70239
-
SHA1
6c18031af26720f47d7c72ff173e3de33ab99d9e
-
SHA256
d15b1829995926fb086d6472112a1a53c753815ac802bd87a3b7c3b2a25ba457
-
SHA512
a2456907a979c6f9640db5236698cbaa3dab2822c3cb02edc4abe12a7ecdfd6efb3e370ae9a350da8d47ee195d04a85017901a9c28b6423ddd489d4427d84e09
-
SSDEEP
6144:VkkeZlXrwpsHrU+Okf295N5PHo2Qm2v1evdpIKOtR1wZuvTHL:aLXrvQ+nOHQ7m+1eVpItR1Guvf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e67f72ed15c009c459e8dd641c70239_JaffaCakes118
Files
-
3e67f72ed15c009c459e8dd641c70239_JaffaCakes118.exe windows:4 windows x86 arch:x86
69ffd393605d7736db3139f1c25f53a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
advapi32
RegOpenKeyExA
Sections
Size: - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE