Static task
static1
Behavioral task
behavioral1
Sample
3e6309f6f2f9e624128ed0ff0fb3381a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e6309f6f2f9e624128ed0ff0fb3381a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e6309f6f2f9e624128ed0ff0fb3381a_JaffaCakes118
-
Size
41KB
-
MD5
3e6309f6f2f9e624128ed0ff0fb3381a
-
SHA1
0ce2b71240de360b007eec47a48af299fc4c9389
-
SHA256
35029476ffcd1f75987875400e6d7502871961f4c44ae9f1706cbbb9db4031de
-
SHA512
b56802de8963baec4e018817368b7f126b84b57be309d83833fc53542caf8977a810a9446eb3d799d04f93c1c55b73fde4df16032b0706425a4218da50f88ffa
-
SSDEEP
768:CoVPv9fqO+co/RjeBslwavnJOS3Rmo566Fc:CoVXBucMjeBcPJOsRmm6d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e6309f6f2f9e624128ed0ff0fb3381a_JaffaCakes118
Files
-
3e6309f6f2f9e624128ed0ff0fb3381a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
Size: 35KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE