Static task
static1
Behavioral task
behavioral1
Sample
3ed505a9af4755998e4405cdb37b32de_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3ed505a9af4755998e4405cdb37b32de_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ed505a9af4755998e4405cdb37b32de_JaffaCakes118
-
Size
57KB
-
MD5
3ed505a9af4755998e4405cdb37b32de
-
SHA1
8623f20941654760d4e3cecef919b983706e208e
-
SHA256
5260e0a468636273e122af7f4296ea83577ba90b8459f2bc0c1fe3a17e25aaf2
-
SHA512
61caa3fb685ae2ed25aee06112b0f0d2d7736b0a4d71d650100a78ea67394c6dc0927689cba36c7e0f0e6768320b1dd1a920b2bcd46da28c54fa88467f4ef4ca
-
SSDEEP
1536:ECM6Ys4njatv0ubeMFrQYRKz4ka5QGdKxa:ECsDWzeurQSKz4kauGdKa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ed505a9af4755998e4405cdb37b32de_JaffaCakes118
Files
-
3ed505a9af4755998e4405cdb37b32de_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 47KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE