Static task
static1
Behavioral task
behavioral1
Sample
3044b0bd6ea3501f2bd3e584ded0a166_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3044b0bd6ea3501f2bd3e584ded0a166_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3044b0bd6ea3501f2bd3e584ded0a166_JaffaCakes118
-
Size
168KB
-
MD5
3044b0bd6ea3501f2bd3e584ded0a166
-
SHA1
5796005af0cd5703084179b1ee74fbf4fc13eb32
-
SHA256
e2126911005864623ba1e0f7b0ae88d32e870969a7db05f42f5c0d7743ffd410
-
SHA512
430e8e58871f81bf7cc97f32383412a1c4adfffb19ed2a05f149c645aa77695a458e7a5a319453c51d1a77d00a1ca199e592d8e4d1623be3a8f66bd533dc823c
-
SSDEEP
3072:viVD0vGflMJUn7Bn3YmF14WQ1vrNL5K5r565W5S5SqzIYmu6Ml5exyA7KW2bRGkx:vm/f2JUn7xTF14WQ1vV5K5r565W5S5Si
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3044b0bd6ea3501f2bd3e584ded0a166_JaffaCakes118
Files
-
3044b0bd6ea3501f2bd3e584ded0a166_JaffaCakes118.exe windows:4 windows x86 arch:x86
2f3c5da38e687ed8e68cd2b55dbd54f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
Sections
code Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wtq Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.snaker Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Np Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE