Static task
static1
Behavioral task
behavioral1
Sample
3d761feb93a965a2a373d7c374c136b4_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
3d761feb93a965a2a373d7c374c136b4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
3d761feb93a965a2a373d7c374c136b4_JaffaCakes118
-
Size
945KB
-
MD5
3d761feb93a965a2a373d7c374c136b4
-
SHA1
5ff7180abe71346ca5c3426e800036c604dffe34
-
SHA256
175c45ff811521db6be8559a5b933346d1061539d55f41c325b4f81180ec1a67
-
SHA512
713b6aebaa2d0ddba0787b1693ce5e1d86567086d2f6a58bf3f95985798af31a54a89e1e64b98145dadea18ac5f6725f4d2d5e5fbb20312e002164b2582e19d1
-
SSDEEP
24576:UuhaXeZJ8NI84eZJ8NI8QeZJ8NI84eZJ8NI8D:bl8l8t8l8D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d761feb93a965a2a373d7c374c136b4_JaffaCakes118
Files
-
3d761feb93a965a2a373d7c374c136b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ