Static task
static1
Behavioral task
behavioral1
Sample
3bdc7162882d6ef11d15221b2eb56cf8_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3bdc7162882d6ef11d15221b2eb56cf8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3bdc7162882d6ef11d15221b2eb56cf8_JaffaCakes118
-
Size
95KB
-
MD5
3bdc7162882d6ef11d15221b2eb56cf8
-
SHA1
58c6fbac5b496f0762a41883543712922c59bd35
-
SHA256
e3c1bc830f31c32f61dbdd58d973432f014d2d3738164f3ebf1639c481981d94
-
SHA512
27f3652a25bd50a20298390f8918c81117b56f419d32b7c933e714c100587f4281f9788d892ff73f9f9414006a12aa943a21f85c526aec50d8a3a77b065a5706
-
SSDEEP
1536:M8uto/VJelP1YZtCjShfshA5FjGJ0Bc/n3KeIQYDFS+cX/0SFDk6iltC:1q8UP1YZmSh0u5FjGO4+8+cXMSRjivC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bdc7162882d6ef11d15221b2eb56cf8_JaffaCakes118
Files
-
3bdc7162882d6ef11d15221b2eb56cf8_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
.text Size: 75KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ