Static task
static1
Behavioral task
behavioral1
Sample
3d390230f3d72f0dec940a688a7a3ee8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3d390230f3d72f0dec940a688a7a3ee8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3d390230f3d72f0dec940a688a7a3ee8_JaffaCakes118
-
Size
31KB
-
MD5
3d390230f3d72f0dec940a688a7a3ee8
-
SHA1
368c6f9fd476ac90bde174ebb6dece708c6fef66
-
SHA256
ed2b21e696cf349a11c1160225d9b2feb37409026f92aa388c60361c1854646d
-
SHA512
66b0ea11db298f91bc409ddee592219f99e7367e39ec2e64181b7ca67e41dec3fc3fe7478084f9cb07eeb6b90c185e703ed78db8cf7b2b8f8c696bbe629d7835
-
SSDEEP
768:hOAUg/ZBP3TsGPqPkluVYXLCMb3IDRad44LD51INVXyXo:hOVmP3jPEsuVQ4aao5mNlAo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d390230f3d72f0dec940a688a7a3ee8_JaffaCakes118
Files
-
3d390230f3d72f0dec940a688a7a3ee8_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE