Static task
static1
Behavioral task
behavioral1
Sample
3ec1dbcd44e23d28a211cccc60df994e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3ec1dbcd44e23d28a211cccc60df994e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ec1dbcd44e23d28a211cccc60df994e_JaffaCakes118
-
Size
23KB
-
MD5
3ec1dbcd44e23d28a211cccc60df994e
-
SHA1
eca0ecd0e10645664becf79e3fd86a940a8d919d
-
SHA256
60af035cdc7ef14f0325488cd7484bd6103659d248e538ea4e47625792e50060
-
SHA512
4c6a5f35b777f003350fe276638fb3fee328575207e1878a9eadd5375d99e35f7e2707e3c605409396c988446ee91bdd2693337e9aa37848e9cfa4f35ad44bb9
-
SSDEEP
384:FJKjeArs8LsDZiBgE6Q7jtUK7bKZSjKdP2abCHjwiKT3qPDnjqnHkyFuvANcvxFq:CFrqsBD7qWFjM3WsT3UDnyFuvZxFaf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ec1dbcd44e23d28a211cccc60df994e_JaffaCakes118
Files
-
3ec1dbcd44e23d28a211cccc60df994e_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 18KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE