Static task
static1
Behavioral task
behavioral1
Sample
3eb79c7f54b6ae0187531ce0e6193f4e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3eb79c7f54b6ae0187531ce0e6193f4e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3eb79c7f54b6ae0187531ce0e6193f4e_JaffaCakes118
-
Size
83KB
-
MD5
3eb79c7f54b6ae0187531ce0e6193f4e
-
SHA1
ac2b847975661cb2410335450f041ca9789583ac
-
SHA256
00e22ead7d827984c131cb048f12b1d9dc2b44e7716c2c438e43625c6a814f3d
-
SHA512
68bbddfe1664ece6e7a9f23f39f0e921aea9bf03b128bbf54e719b92065d21f3a1f56c8c882f545b1d0078a7fc402a858f03730ffde77a2cd60464d44149d11b
-
SSDEEP
1536:/GGGGr6TYVB/cSHBsJqXXsByGLvC1hEthlDsjEErxTWDTMqhGKYIZTET8s0C98:/GGGGGWlHW0sYGLavEthGjBkMqhGKZTX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3eb79c7f54b6ae0187531ce0e6193f4e_JaffaCakes118
Files
-
3eb79c7f54b6ae0187531ce0e6193f4e_JaffaCakes118.exe windows:4 windows x86 arch:x86
e5cd297866ecea3fd4c206a9c731241f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetMessageWaitingIndicator
OpenJobObjectW
LocalHandle
GetEnvironmentVariableA
SetConsoleTitleA
UnregisterWaitEx
MoveFileExW
GetTapeStatus
DeleteTimerQueue
RtlUnwind
FillConsoleOutputAttribute
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE