Static task
static1
Behavioral task
behavioral1
Sample
3ead660eba8b88ff1d4795e79b16534d_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3ead660eba8b88ff1d4795e79b16534d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3ead660eba8b88ff1d4795e79b16534d_JaffaCakes118
-
Size
32KB
-
MD5
3ead660eba8b88ff1d4795e79b16534d
-
SHA1
f06fd12a0187412635e3856b391fa5b1299886a6
-
SHA256
023a17a696ba4d6d6162a6ee339b48c31e62a4002848c26bc33e6f5f78841ebc
-
SHA512
329662a40814ff0dc168c13b74b6ee20a22bc7808d46474bfc04e83acefe24729a7e797372d2e420eacaf93ca655048174db0aa69e5e16c288dc974ecf9d270d
-
SSDEEP
768:KBogTzTBAyfTeiq1VW0kwEqnRDL7bTLeTf3z6Z6:gBJUEqRTbTKT2Z6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ead660eba8b88ff1d4795e79b16534d_JaffaCakes118
Files
-
3ead660eba8b88ff1d4795e79b16534d_JaffaCakes118.exe windows:4 windows x86 arch:x86
a7401fcc44086aa07514aecef37e1012
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetProcessHeap
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.TEXT Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.r2rc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ