Static task
static1
Behavioral task
behavioral1
Sample
3ffb5ddfee4d99ef040f045fd5ef6798_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3ffb5ddfee4d99ef040f045fd5ef6798_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3ffb5ddfee4d99ef040f045fd5ef6798_JaffaCakes118
-
Size
97KB
-
MD5
3ffb5ddfee4d99ef040f045fd5ef6798
-
SHA1
47301a46259e9cfbd9696a57a9543071a8213aeb
-
SHA256
aa7b91d3d201816e62195adcb144d676f95281de090ecb1570a5fbc8f7c5192f
-
SHA512
958c8f135d31115efcf3b837c5a59ccbd9e41fcbeb5323a12505c8af200842d92be1178fff3b15ddda0210d8d9997bef5807ef33ff188ec1628da333262be645
-
SSDEEP
1536:SQPfwbyLqOH7rCt/eoneahfSTiIDEuaZ99RtgiKQ5ADz9g2xmAo87IianXENNWW:S25rCjfIDEb9RqPD+2xC87I6vWW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ffb5ddfee4d99ef040f045fd5ef6798_JaffaCakes118
Files
-
3ffb5ddfee4d99ef040f045fd5ef6798_JaffaCakes118.exe windows:5 windows x86 arch:x86
3f5fb82cab51b8f05b7d48c6eda94ff0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
RemoveVectoredExceptionHandler
IsProcessorFeaturePresent
lstrlenW
GetProcAddress
AddVectoredExceptionHandler
GetThreadPriority
GetModuleHandleA
EnumDateFormatsW
FindFirstVolumeA
powrprof
GetPwrDiskSpindownRange
Sections
h Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
A Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
h Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
h Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
h Size: 2KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OEj Size: 130KB - Virtual size: 128KB
IMAGE_SCN_MEM_READ
iIA Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DCI Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IHF Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EPj Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
A3G Size: 14KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ