Static task
static1
Behavioral task
behavioral1
Sample
3f6eeec9f05e3c717e17107bf3e88ccf_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f6eeec9f05e3c717e17107bf3e88ccf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f6eeec9f05e3c717e17107bf3e88ccf_JaffaCakes118
-
Size
10KB
-
MD5
3f6eeec9f05e3c717e17107bf3e88ccf
-
SHA1
f0e0327857b03a81e064531d7cc068cbfafda317
-
SHA256
8f63d726816d34de5844d7e88f18147d3534a81d000350bfdd43dc996371575a
-
SHA512
7eed2e47901af427f7c722bf42c512edbbcb6e518486e55ae904383d28f9f752a8c417653d24dbc17dab15cc7831713173fc55b6ab660431c3f80767b3a259fc
-
SSDEEP
192:IKl8+bbm3+jxmxiFUi3aUdpPgKqAKRsrCN58iWa4put:FlrLyAXHuXNWP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f6eeec9f05e3c717e17107bf3e88ccf_JaffaCakes118
Files
-
3f6eeec9f05e3c717e17107bf3e88ccf_JaffaCakes118.exe windows:4 windows x86 arch:x86
224311aa6b21d66209b7612d4eb83ae0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
memset
shlwapi
SHGetValueA
wininet
InternetCrackUrlA
user32
wvsprintfA
ole32
CoInitialize
oleaut32
SysFreeString
Sections
.text Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE