Static task
static1
Behavioral task
behavioral1
Sample
3e3e3758bbc5689ac5061a3d1b30e461_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3e3e3758bbc5689ac5061a3d1b30e461_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3e3e3758bbc5689ac5061a3d1b30e461_JaffaCakes118
-
Size
272KB
-
MD5
3e3e3758bbc5689ac5061a3d1b30e461
-
SHA1
3f1641fbb28cbea0da1f9951b66b1248744ec025
-
SHA256
699b0c13a2b350736b994a085252c4216febb9a307e09133057ef6d19ddd221c
-
SHA512
f992051a5edeed3d2bf3889a9629dab262eeac22eea35f5d96f791353809c3a1c14379fd94c5ab930f333d5e02cea75b498b59924129eb447994fd0beeda1786
-
SSDEEP
6144:/gF9rCFIXY6NGq1SlOFG0Xx7dP84xCvX2pEypLX7tCkfxe:4F9rEIXVGOFzXbPE9OFa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e3e3758bbc5689ac5061a3d1b30e461_JaffaCakes118
Files
-
3e3e3758bbc5689ac5061a3d1b30e461_JaffaCakes118.exe windows:4 windows x86 arch:x86
335982d863c0c33870c810790ae97d54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetModuleHandleA
GetVersionExA
winspool.drv
ReadPrinter
advapi32
RegLoadKeyA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 266B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 267KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE