Static task
static1
Behavioral task
behavioral1
Sample
3a1f7b54d9b4afe5ab4fff07e4d48818_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3a1f7b54d9b4afe5ab4fff07e4d48818_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
3a1f7b54d9b4afe5ab4fff07e4d48818_JaffaCakes118
-
Size
587KB
-
MD5
3a1f7b54d9b4afe5ab4fff07e4d48818
-
SHA1
d41e72887ee40df09069e9fdd77c9af8d2f95ba0
-
SHA256
b54898102dcc61983c219276153dae5775d61927eee518cff2b8e2b1a9755d55
-
SHA512
30e84c61f0a504c4ee185abf788a2287c0700a6629abc93a9182d9a8721c5013ab955a70fffeb5eed61d5d2997ac6d1b886c6bf6b7bdd6ca8f68b462a1a8da15
-
SSDEEP
6144:UZfec9EbXDk6Rk+BEKWnmy+g46nmy+g4SuHOVB/nmy+g46nmy+g4R+:UZWtI6Rk+BoVmOVB/Vu+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a1f7b54d9b4afe5ab4fff07e4d48818_JaffaCakes118
Files
-
3a1f7b54d9b4afe5ab4fff07e4d48818_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ