Static task
static1
Behavioral task
behavioral1
Sample
3fce710f8fbf5b86384845444856f5de_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3fce710f8fbf5b86384845444856f5de_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3fce710f8fbf5b86384845444856f5de_JaffaCakes118
-
Size
39KB
-
MD5
3fce710f8fbf5b86384845444856f5de
-
SHA1
3b797774d9ed25ae7d5989cc8683935b03166486
-
SHA256
3ef55564a7460f58a762da4250b7f1c90674d5c0e746b2013ad64d68af5aec35
-
SHA512
0d03e64928a87132544e27735a4c6afbc0e7847a5c8ba02221e9cad680da0209f4ddfaf0d9adcd64ba9810a2bd0d9416d040545a53739610932d995cfc953d09
-
SSDEEP
768:FUfiwHgh8yEH/qs97e+7nyWXjXknantS8YzXB:FUfiw+85C27e+NzknYUFr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fce710f8fbf5b86384845444856f5de_JaffaCakes118
Files
-
3fce710f8fbf5b86384845444856f5de_JaffaCakes118.exe windows:4 windows x86 arch:x86
d7c3c9382b43e5478a56ea7d42452cdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ