Static task
static1
Behavioral task
behavioral1
Sample
3f0acff8e6df9a77563eda81bf58c47b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3f0acff8e6df9a77563eda81bf58c47b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3f0acff8e6df9a77563eda81bf58c47b_JaffaCakes118
-
Size
46KB
-
MD5
3f0acff8e6df9a77563eda81bf58c47b
-
SHA1
0927816812d93b11d574d8552be8672e65e8be98
-
SHA256
0dbad4610ea1cc11ee9ee870bc8492741a3980676b33bd59f218c6ac82096441
-
SHA512
f90d6b139aee2f44e85e8ec13718634c3a968af82588e757a0374d26a5ccb96e7891cac382b89e2a9206b2e11546107fbd13e12c7b08b86fcd17d362e8393300
-
SSDEEP
768:iuqhEBTuE07itGAAZzK9jysQalM6Z5dIJuAUQ5u1P5xAvcfODxkEyJmZZE+zFCC9:iFST8+tXOzK9jyyVZFAUQM1BxAvcGDxV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f0acff8e6df9a77563eda81bf58c47b_JaffaCakes118
Files
-
3f0acff8e6df9a77563eda81bf58c47b_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 36KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE