Static task
static1
Behavioral task
behavioral1
Sample
3fa008c155451b2ad45a79421583d1c3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3fa008c155451b2ad45a79421583d1c3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3fa008c155451b2ad45a79421583d1c3_JaffaCakes118
-
Size
74KB
-
MD5
3fa008c155451b2ad45a79421583d1c3
-
SHA1
c5733a6c560c49532a7a5050a3a4a4d7628aa4e6
-
SHA256
01a973362c0c61f5a5297e41ecdf76db798b127b0a6299a42c915bf36f7c1fcb
-
SHA512
e299615038a21f0d585bd9e9dbe5c46e8353d67453cd1e5febb8ad6bd42f2dad8f21221407892c5e17572db0886288d245090f6ee6d6c9b8e35a52333de2cc62
-
SSDEEP
1536:ZGhv9ztbndr2Uy26rIertMmHKf05tXJe7Lno/RJkSsT0tFRJSFAoD8VeQswfarIl:ZGr32h26rjpbJe7LnoBZRx1Bswfd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fa008c155451b2ad45a79421583d1c3_JaffaCakes118
Files
-
3fa008c155451b2ad45a79421583d1c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
3e3ef1ae49696ec78ceead626add363e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetTickCount
lstrcmpiA
CreateFileA
CloseHandle
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetTickCount
lstrcmpiA
CreateFileA
CloseHandle
Sections
.text Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE