Static task
static1
Behavioral task
behavioral1
Sample
3b0e212d15f8ef62a61b08915327fedb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3b0e212d15f8ef62a61b08915327fedb_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3b0e212d15f8ef62a61b08915327fedb_JaffaCakes118
-
Size
91KB
-
MD5
3b0e212d15f8ef62a61b08915327fedb
-
SHA1
2e56fc5998ca70126396896f9f50f4bb3391680c
-
SHA256
88a74e0dfac3ed46a51c862bec4fd2daaef15a704ebc594c2b216370d98aebea
-
SHA512
5a9ed6c1c1d51e158f0a86569b353d8f1b5b01399a2d386f157e39e8b89ccff1f00248b86776376397b411ed079dabfc67b1030c7567734b511af95b2355abed
-
SSDEEP
1536:SQPfwbyLqOH7rCt/eoneahfSTiIDEuaZ99RtgiKQ5ADz9g2xmAo87IianXm:S25rCjfIDEb9RqPD+2xC87Is
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b0e212d15f8ef62a61b08915327fedb_JaffaCakes118
Files
-
3b0e212d15f8ef62a61b08915327fedb_JaffaCakes118.exe windows:5 windows x86 arch:x86
3f5fb82cab51b8f05b7d48c6eda94ff0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
RemoveVectoredExceptionHandler
IsProcessorFeaturePresent
lstrlenW
GetProcAddress
AddVectoredExceptionHandler
GetThreadPriority
GetModuleHandleA
EnumDateFormatsW
FindFirstVolumeA
powrprof
GetPwrDiskSpindownRange
Sections
h Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
A Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
h Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
h Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
h Size: 2KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OEj Size: 130KB - Virtual size: 128KB
IMAGE_SCN_MEM_READ
iIA Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DCI Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IHF Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EPj Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
A3G Size: 14KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ