Static task
static1
Behavioral task
behavioral1
Sample
3974f699e72f4015642c01e57d0d623f_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3974f699e72f4015642c01e57d0d623f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3974f699e72f4015642c01e57d0d623f_JaffaCakes118
-
Size
76KB
-
MD5
3974f699e72f4015642c01e57d0d623f
-
SHA1
1fe8c5930ac0a723a8ada18ea5d2e311256a8233
-
SHA256
1c979a785562b7c48b6db2f390a15db1b32749cea180fdbc7add415e2966fba8
-
SHA512
c342df641b4ce6cfa041f2cf46c1798ec60fe5c2cfcf056701c4e43c8d6e2c8e85c8ddc1035d4adb65e86c77fe7639a314c35d5e9623324352de4696ccd7fa7d
-
SSDEEP
1536:gq4NxY7plvI3wSicbXAty/RuTArpjVrs2ryrd1vUQuq6:J4NIptI3w4zrHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3974f699e72f4015642c01e57d0d623f_JaffaCakes118
Files
-
3974f699e72f4015642c01e57d0d623f_JaffaCakes118.exe windows:4 windows x86 arch:x86
efc875ece728266d6455f7bc07fab75c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleOutputAttribute
GetModuleHandleExW
GetLogicalDrives
ConsoleMenuControl
DefineDosDeviceA
InterlockedDecrement
LCMapStringW
GetFullPathNameW
GetCompressedFileSizeW
OpenWaitableTimerW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE