Static task
static1
Behavioral task
behavioral1
Sample
3cc0d1114845584136fc10fbd34c5958_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3cc0d1114845584136fc10fbd34c5958_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3cc0d1114845584136fc10fbd34c5958_JaffaCakes118
-
Size
76KB
-
MD5
3cc0d1114845584136fc10fbd34c5958
-
SHA1
5d17bcbacacea8b3c83a474a401c816405b0ef37
-
SHA256
f53c89965c9e176b638f6e2a6b8f311b2acb6c641d8b7da404250c9633ee6e69
-
SHA512
de59c230e8ca02117a0c8403609aad9be198d6ed5ec330f25cb1b9d0b4a6c68135bd1928931ad41ad43ed9781b74196e0925dffaf750bcb0ada6526c1e87ff58
-
SSDEEP
1536:c/N3NWtrZHq0GWjHPw2Jl+IGUWp3nfXokxZGP8CW5R9sYpwjEErxTWDTMqhGKYIn:c1gSxiP4Df/qyTRpwjBkMqhGKZTbx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cc0d1114845584136fc10fbd34c5958_JaffaCakes118
Files
-
3cc0d1114845584136fc10fbd34c5958_JaffaCakes118.exe windows:4 windows x86 arch:x86
752244e07818d482c70b278d9a88d86a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DefineDosDeviceW
CreateSocketHandle
GetSystemDefaultLCID
SetConsoleLocalEUDC
BindIoCompletionCallback
GetModuleFileNameA
OutputDebugStringW
VDMOperationStarted
BaseUpdateAppcompatCache
BaseCheckAppcompatCache
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE