Static task
static1
Behavioral task
behavioral1
Sample
3b9a4dc21a52c324f8bf404a39f68e33_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3b9a4dc21a52c324f8bf404a39f68e33_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3b9a4dc21a52c324f8bf404a39f68e33_JaffaCakes118
-
Size
367KB
-
MD5
3b9a4dc21a52c324f8bf404a39f68e33
-
SHA1
cb571bb61cbaf9a140582881b65160df8ccec609
-
SHA256
e085ff6309582249deada865e9c04c9d25301e1b6e599493d103482550129bde
-
SHA512
45f388595164bac4efb33304440198abdfdde1075bd5e8b4e9cb0faa6f9ab619a6033500fa369c54d9f1a673767d74e8b56eaa1005d78dbe7a7bc6f80b669d88
-
SSDEEP
6144:MSBcswq90wAdaZwNpgiVwGd3oOwnDowSbmoq4YrNw7Ef7TOs9HGEXEx2ft7fTneR:yg0wajNpgiVwGd3RwnDowSbmoq4YrNwP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b9a4dc21a52c324f8bf404a39f68e33_JaffaCakes118
Files
-
3b9a4dc21a52c324f8bf404a39f68e33_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
8236714 Size: 56KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4520514 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1655178 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE