Static task
static1
Behavioral task
behavioral1
Sample
3a175bbb1adb9dd3d9e3a0ad9f5581b0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3a175bbb1adb9dd3d9e3a0ad9f5581b0_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
3a175bbb1adb9dd3d9e3a0ad9f5581b0_JaffaCakes118
-
Size
1.1MB
-
MD5
3a175bbb1adb9dd3d9e3a0ad9f5581b0
-
SHA1
b6e7f84d2e2d7f60a7289a1cc03fbfc0808eee22
-
SHA256
3f72c0a5908e48c1af27fc1b7478aeb8079fdbb7202bc21e3d9826ee9ffd9a00
-
SHA512
61b5d760e0a12d4b733d9ec0e2fa48cfd801bbf0d6b6892e64cfca079328ce672359a9eb171c14ae87bf82f1304e00e88d534c6eac3aceb33a37a3150c07f882
-
SSDEEP
24576:HAJ0LoY+UbbV3v05VWR8YUQj48zb7MEbrtzD4aD6MsMxlJ4KPd:g7Y+a38X43p4qb7F94VMJ4g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a175bbb1adb9dd3d9e3a0ad9f5581b0_JaffaCakes118
Files
-
3a175bbb1adb9dd3d9e3a0ad9f5581b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ata Size: 11KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rr Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ