Static task
static1
Behavioral task
behavioral1
Sample
3e38ee13482ca165903c32f11822896a_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3e38ee13482ca165903c32f11822896a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3e38ee13482ca165903c32f11822896a_JaffaCakes118
-
Size
18KB
-
MD5
3e38ee13482ca165903c32f11822896a
-
SHA1
678ad7e4030f654283a5949e506c491d889eb3bf
-
SHA256
6da696f99ae83238b9aa1692032fcab2269dba99741342e9f1f70c532edd7168
-
SHA512
c677e497f700a972da34139d4a2d56b8d321577262ff33db1401a8e91bc6ce711edaca971ed6ed587d7d63b7eefc5fb6010628e4f5763e7ccc7416eb5aec4050
-
SSDEEP
384:Cf7Sc2aAcB1F7DAEUY2AOfqSl86bYDnFLrUMKCMnEv:Cf2c2aAcVAEUYACkEnaeMEv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e38ee13482ca165903c32f11822896a_JaffaCakes118
Files
-
3e38ee13482ca165903c32f11822896a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 14KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE