Static task
static1
Behavioral task
behavioral1
Sample
3eb2b5d6df7f80ded2c0a86893c70e4c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3eb2b5d6df7f80ded2c0a86893c70e4c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3eb2b5d6df7f80ded2c0a86893c70e4c_JaffaCakes118
-
Size
197KB
-
MD5
3eb2b5d6df7f80ded2c0a86893c70e4c
-
SHA1
1831925721a95b50e0d657f8a54a84366e32a58f
-
SHA256
1de33592aa88ecbf9af2dd401d0198ea112cc30bf14d789cfa95cc9f8381b43f
-
SHA512
d0434982f478f2dfac8ac97ed2dcec01369e6b5f3ced4e8b14f02a2a38d2cddf20426eb7b47ff6a07552d51d029f3e1577133c015c66dafa8b598009e6fd367f
-
SSDEEP
6144:huL+jff8tOURY6jQFZ/F2k2jlZf1hka9Vd:swfmOURf8FrBMFbkk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3eb2b5d6df7f80ded2c0a86893c70e4c_JaffaCakes118
Files
-
3eb2b5d6df7f80ded2c0a86893c70e4c_JaffaCakes118.exe windows:1 windows x86 arch:x86
afd38d87e688f0edcb6cf4700cffb83d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
VariantChangeTypeEx
gdi32
UnrealizeObject
ole32
IsEqualGUID
comctl32
ImageList_SetIconSize
comdlg32
GetOpenFileNameA
Sections
pec1 Size: 179KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE