Static task
static1
Behavioral task
behavioral1
Sample
3efcdfd4748e351832c3008bc211cf33_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3efcdfd4748e351832c3008bc211cf33_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
3efcdfd4748e351832c3008bc211cf33_JaffaCakes118
-
Size
452KB
-
MD5
3efcdfd4748e351832c3008bc211cf33
-
SHA1
a0a11d773fae62d40a3dd9373a2198ad9b28e9a3
-
SHA256
2fc6e869f602e21d477ae9f24c151fbc1e07481c388ea7d07d7f52c921ed714b
-
SHA512
0714f4f79abd264a7c7e02badad9f1c3d7d3bac674992231b666911fda69aeb24b3b1c04de3aaf17249e56dc3aec048c48a3ac792ac92392b39809e8c8388d4a
-
SSDEEP
6144:VG+u7yofgzKw8xQOc7uy2bJZBSMb1U/hGliq9WUu7oV1UDXH9I86gAud4AH:wy8gm5WX9KJVa/hGH9uiWK8684AH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3efcdfd4748e351832c3008bc211cf33_JaffaCakes118
Files
-
3efcdfd4748e351832c3008bc211cf33_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ