Static task
static1
Behavioral task
behavioral1
Sample
3efa285c722c49f533ecc84048eeff0a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3efa285c722c49f533ecc84048eeff0a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3efa285c722c49f533ecc84048eeff0a_JaffaCakes118
-
Size
431KB
-
MD5
3efa285c722c49f533ecc84048eeff0a
-
SHA1
f6b3987c61a352e21d2ec8292d9d63aef007aa51
-
SHA256
e2f1737774c9ae5f3dd1b91500f9b24ad0665f633f70fb95458b2b446d6d0863
-
SHA512
876a57b9a8b1f489bad165a9ef71ab798e6cb41fd7d5bc4feebf033b01c2d6c990163e6bc8c90349804d087beac0ae532e851eb06074a107d84e176ee67a7f2e
-
SSDEEP
12288:fuEEw0SdloqElzzhLE4jDCrS/cavWD/2kt//k:WEEw1XLMzNnSMdy3k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3efa285c722c49f533ecc84048eeff0a_JaffaCakes118
Files
-
3efa285c722c49f533ecc84048eeff0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f918e6e406fc3779e918c2292971269b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeviceIoControl
DuplicateHandle
LCMapStringW
SetEndOfFile
msvcrt
strncat
bsearch
memmove
wcscat
_adjust_fdiv
realloc
strncmp
strlen
qsort
fseek
_wctime
atol
fprintf
__dllonexit
wcslen
_access
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE