Static task
static1
Behavioral task
behavioral1
Sample
3b7c0c4cf2d6fcfe220f3b103d903492_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3b7c0c4cf2d6fcfe220f3b103d903492_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
3b7c0c4cf2d6fcfe220f3b103d903492_JaffaCakes118
-
Size
280KB
-
MD5
3b7c0c4cf2d6fcfe220f3b103d903492
-
SHA1
769daaaa428d175d76f7a392313e78189d4b5f03
-
SHA256
629f87844c7f3018a6b1e00ea33438b689d5825f70ea40ad6af0eea91004642a
-
SHA512
cc5c0456f3d7bff0a11f3f5130fe18597dea3602a863e56b4b2ad5c4b31ca8218b7b9240da7a3cf784dc163b7ae17fecb882299bfc8fd0cded976aa2c77e9ee4
-
SSDEEP
6144:ANDXwH5i970z/FufuwiRQhYwLp/b+zjjFxUL8p3jF:MXwH5iaITiREYwtD+zFxUL8ph
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b7c0c4cf2d6fcfe220f3b103d903492_JaffaCakes118
Files
-
3b7c0c4cf2d6fcfe220f3b103d903492_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ