Static task
static1
Behavioral task
behavioral1
Sample
3ee5906a1dcfe1d6e52b86fb173bf968_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3ee5906a1dcfe1d6e52b86fb173bf968_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3ee5906a1dcfe1d6e52b86fb173bf968_JaffaCakes118
-
Size
15KB
-
MD5
3ee5906a1dcfe1d6e52b86fb173bf968
-
SHA1
c3ecc949ad17aeeb477cc8f33ef8e45f9fda66f3
-
SHA256
da2ecdb30f0bf93569e2b04a5868035a14364aa6372e2eeef973d6d33cdd345d
-
SHA512
f15d0f106419f1bc6c464914b627852c17022b5ef3a71b7bc678e832faa34b70ef0a7aa8c39548a23dd31b39dcb2405ef975bf17cf57fb1b2069763b2b40f690
-
SSDEEP
48:6GZtY8kGKafgO4TG9SU6c3uL0Ivy+u8JkoxOnftzBq7:dtY85KafwTG8c3uoIaduaftzQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ee5906a1dcfe1d6e52b86fb173bf968_JaffaCakes118
Files
-
3ee5906a1dcfe1d6e52b86fb173bf968_JaffaCakes118.exe windows:4 windows x86 arch:x86
75425eba3977a336dc6c3f1c3bcbbf37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ