Static task
static1
Behavioral task
behavioral1
Sample
3ecac3377d08b3e8e2a2633172b83e99_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3ecac3377d08b3e8e2a2633172b83e99_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ecac3377d08b3e8e2a2633172b83e99_JaffaCakes118
-
Size
8KB
-
MD5
3ecac3377d08b3e8e2a2633172b83e99
-
SHA1
8a44ddc64cb692063b7e469f09a34e13153de75a
-
SHA256
ef9a79a39543ac32ce326f94880dedac7a61354bafc161d570e6e5ecbd8c7de3
-
SHA512
07bc0a820eab41100394033082b4c9841b174e35a7ae2afe907a96d1e740d33367a0ff05425735e7a80d54521859f67dd435262db4a51a09e5d648fa398e53ef
-
SSDEEP
48:OEP4oLAEoXuBFeHatL+mStZR9OIWH1WFLBYFHHAxNTEKlHpAfBn6M5:nPaZXuHIatL+/t/9VGFHHAx7HKfIM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ecac3377d08b3e8e2a2633172b83e99_JaffaCakes118
Files
-
3ecac3377d08b3e8e2a2633172b83e99_JaffaCakes118.exe windows:1 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
CODE Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ