Static task
static1
Behavioral task
behavioral1
Sample
3728d3f58d3a03a5aa945d4b1c07fbf0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3728d3f58d3a03a5aa945d4b1c07fbf0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3728d3f58d3a03a5aa945d4b1c07fbf0_JaffaCakes118
-
Size
102KB
-
MD5
3728d3f58d3a03a5aa945d4b1c07fbf0
-
SHA1
ccb7bafb3d080f5b1678336cb41eb00755a174e9
-
SHA256
dfd81c3abb5836ff6fe31430ade641cba55ef0c07b02ece849418a7bc660b0d8
-
SHA512
49f022e556a49222b3118817a9b0df97a1cd9e554b78ba60d92bb6e328272ac688c661e1fe52389006d5656dc5723fc1ed74e10b4d5cff9d16bcd9eebe4f69a6
-
SSDEEP
1536:yMRHky5iwfxMdmfLHtNVlF//zV53lDINb430yR1xDm0j1pT6nJz3y6xIw1KZqXq:yMREyMwqsfLHtDVDI0R1xDp6nrxIw8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3728d3f58d3a03a5aa945d4b1c07fbf0_JaffaCakes118
Files
-
3728d3f58d3a03a5aa945d4b1c07fbf0_JaffaCakes118.exe windows:4 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
Sections
.text Size: 67KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 21KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Stone Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE