Static task
static1
Behavioral task
behavioral1
Sample
3ec4357aaea81de76b1c53d15f1f04a5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3ec4357aaea81de76b1c53d15f1f04a5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ec4357aaea81de76b1c53d15f1f04a5_JaffaCakes118
-
Size
76KB
-
MD5
3ec4357aaea81de76b1c53d15f1f04a5
-
SHA1
f2c563355047e6404ef1fdfeb5e4d595ba1b1b86
-
SHA256
14524eb25dbf372d2248e6b7cfbf2b4db2b14a2ccedb16064b993be6215e4132
-
SHA512
aa026fdae610d65bca73c8d08f6f53dd7902867b99dd5e3ccb5cb2bca46423569d68a9f9e5d655936171a5d560bd8a11e57920e6988ab0e738d4a184af6e1314
-
SSDEEP
1536:QIOYqIcvELjhQ1kAjZLrjdlxjt7y22VSQaJyfmHCJev:QIOPI0ELjKjNrjBGffmHYev
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ec4357aaea81de76b1c53d15f1f04a5_JaffaCakes118
Files
-
3ec4357aaea81de76b1c53d15f1f04a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 40KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE