Static task
static1
Behavioral task
behavioral1
Sample
3a263e37a9c4c62f0174069fa483ee9e_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3a263e37a9c4c62f0174069fa483ee9e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3a263e37a9c4c62f0174069fa483ee9e_JaffaCakes118
-
Size
37KB
-
MD5
3a263e37a9c4c62f0174069fa483ee9e
-
SHA1
6255a95b31f782ddc4493dd1302a6516c259dd86
-
SHA256
cdbe761e9393b32524dcc363f024dd02d3d83284843e02604d75f682e284fe5d
-
SHA512
dfbd1a5403170db118d4dc176aeffe6d1c86b1fcf230fadea3966a9bd36e7fe8b06e8e9a804316fb196d026f5a6e919f18987747b975195dbe327132e2e7007e
-
SSDEEP
768:FVzEq+aJe1mgawzxsUNCub8PC1jIHxATVGuQy5Mz6QCXPX+NtlEcz:FR1+aJe1mgawzxsBub8PC1jIHxATVGDr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a263e37a9c4c62f0174069fa483ee9e_JaffaCakes118
Files
-
3a263e37a9c4c62f0174069fa483ee9e_JaffaCakes118.exe windows:1 windows x86 arch:x86
b8dd9610f7f3c4e817e66f3501bf26f1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
� Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�& Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE