Static task
static1
Behavioral task
behavioral1
Sample
3dae9856c50fe12b78e1b52baaea689f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3dae9856c50fe12b78e1b52baaea689f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3dae9856c50fe12b78e1b52baaea689f_JaffaCakes118
-
Size
63KB
-
MD5
3dae9856c50fe12b78e1b52baaea689f
-
SHA1
332002d801528501a1ab8e07355268bb4aefc649
-
SHA256
4d8fa6ae22c71b27a634bccf564b8722cf8c8bde60d3caba152c2bfe29f7c597
-
SHA512
12d6894ce32d91f2d515ee6665058dd3141398fa4c13865b053a74dcb4df7f2dd73e2641ed41ae4e00b782c9b0b4cc1970323b447e49b5d578ee4a77d70d7529
-
SSDEEP
1536:5dys+WxCHMuUYLDtMtPrJmBXk5rRVNTpaDR6ZrttJdR:2BzHMvGRMFQ5kJq6ZRtJdR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dae9856c50fe12b78e1b52baaea689f_JaffaCakes118
Files
-
3dae9856c50fe12b78e1b52baaea689f_JaffaCakes118.exe windows:4 windows x86 arch:x86
ce8b14cd4f158bcdb8acb98968fc6da4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteProfileStringA
SetFilePointer
ReadConsoleInputExA
GetTimeFormatA
HeapValidate
InvalidateConsoleDIBits
IsBadReadPtr
LZDone
GetSystemTime
SetConsoleTitleA
TransmitCommChar
HeapCreate
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE