Static task
static1
Behavioral task
behavioral1
Sample
3d05d990f2ec398f05d1036d072d5644_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3d05d990f2ec398f05d1036d072d5644_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3d05d990f2ec398f05d1036d072d5644_JaffaCakes118
-
Size
955KB
-
MD5
3d05d990f2ec398f05d1036d072d5644
-
SHA1
93874b4279b91380017d57b317c9f58515482996
-
SHA256
ee3fc623adb4734049f352f8d6a5e1398626b8750302ff96336d3b4a1e10cec8
-
SHA512
499011765e3bc169756a11350bee8a06d1dc4a2d0515f58ecf95eb992a0c97e88b9b527ea700e9d49466eadfe5db6f9fd992703cd39ca76e83555dbcc95dcd3c
-
SSDEEP
12288:UDcoCUyZtwAvAs4wTCyrPT0yq0VezaOvoJpaz/g/J/vVoS:0fty/wAvN7lry0VeH8az/g/J/No
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d05d990f2ec398f05d1036d072d5644_JaffaCakes118
Files
-
3d05d990f2ec398f05d1036d072d5644_JaffaCakes118.exe windows:4 windows x86 arch:x86
e58ab46f2a279ded0846d81bf0fa21f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
Sections
.text Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE