Static task
static1
Behavioral task
behavioral1
Sample
a3bc8cf62223a4fa4d16f7cda66eb8ca_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a3bc8cf62223a4fa4d16f7cda66eb8ca_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
a3bc8cf62223a4fa4d16f7cda66eb8ca_JaffaCakes118
-
Size
224KB
-
MD5
a3bc8cf62223a4fa4d16f7cda66eb8ca
-
SHA1
4f4e69f1ac0f3342e012bbb2fc953687e72f36ea
-
SHA256
2547ceb273e084f9a297010f180204bf9524e7ced415404a3d3a77cd8f7581c9
-
SHA512
284e1f3eb312c1c81fe1cb51aa65bbea649f13c6680cec8cf610952d18024524c59f3ccacc69fa31c26972f06b2c462351e2d93ac6bbfc30d80901182b3ed56b
-
SSDEEP
1536:DRB6MLRtv4p4vKvZ+JIyzUpQdM6LRShcBC6sW:DDtv8Ec9dB60M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3bc8cf62223a4fa4d16f7cda66eb8ca_JaffaCakes118
Files
-
a3bc8cf62223a4fa4d16f7cda66eb8ca_JaffaCakes118.exe windows:6 windows x86 arch:x86
1abc44a2dec0f1967bf4ed44925431da
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
Sections
.text Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ