Static task
static1
Behavioral task
behavioral1
Sample
3a865a98222eb1b8083c91158090413d_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
3a865a98222eb1b8083c91158090413d_JaffaCakes118
-
Size
72KB
-
MD5
3a865a98222eb1b8083c91158090413d
-
SHA1
b3d72006d4f81a8b2f833de5017f645f38ededbe
-
SHA256
b8cd7d1e12f9eb788d6d334afe5d1f72e3b6e16a342038e4f99560075d58bead
-
SHA512
23b3094511f9ffc539f1f401121f3d7f5081756f3dec67be887f1e271292d27debd363b482a931138be2dae2131c172178677be908162d91baa0add29d4ab18a
-
SSDEEP
768:9+u5yGzkMa0QFd5GFoaWcFHgLmgjj1XsZ/82UnJekySsV7BwJKrE9DWRLSNisiXn:Y/MTRWcdgCge4sE4RLwyXZ1r9Bo4Ma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a865a98222eb1b8083c91158090413d_JaffaCakes118
Files
-
3a865a98222eb1b8083c91158090413d_JaffaCakes118.exe .wsf windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ