Static task
static1
Behavioral task
behavioral1
Sample
3ea74db3775e54415b3eb1e66cdc832b_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3ea74db3775e54415b3eb1e66cdc832b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3ea74db3775e54415b3eb1e66cdc832b_JaffaCakes118
-
Size
93KB
-
MD5
3ea74db3775e54415b3eb1e66cdc832b
-
SHA1
723a558eee8a91bfb141510bed0a822ff56f8276
-
SHA256
c4f3bbbd944aa48e444d4e8be4fb1efb84713b2f8dcffc79a3dda12c09fb9f92
-
SHA512
91fcbcde8113c3e138902fd0a16bfcc63a9b93c597ea15ae7c5c559bf06f827a1aad990e8eb94feb0a54c17895bce2c9ca25340305fc332aa769d0b7502c3f4b
-
SSDEEP
1536:Aue1UjC3BqmZ2o1pc/06YQc6qV2eptMnM9vfLBZAyesqNSYc9NuBV/vhxBxpAphO:UijC3MUPcbLfqV2QM8TBZA7sqNSx9NyT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ea74db3775e54415b3eb1e66cdc832b_JaffaCakes118
Files
-
3ea74db3775e54415b3eb1e66cdc832b_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE