Static task
static1
Behavioral task
behavioral1
Sample
3674e2bfb1962bd9e2f176b6cfe17d7e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3674e2bfb1962bd9e2f176b6cfe17d7e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3674e2bfb1962bd9e2f176b6cfe17d7e_JaffaCakes118
-
Size
24KB
-
MD5
3674e2bfb1962bd9e2f176b6cfe17d7e
-
SHA1
38d2af5d70a5680cd8b773fa1e9af11cefa49d97
-
SHA256
5e92e46357aa4d19ec6a4bc819b4ee9f27da87d707567fc6ce6f3ef2e3830ee5
-
SHA512
88b54c0b3f2f17d1eecff670697389f93afaf1045fbfd7df89844977d2c2fb046d93e9d5aac1165b30da9aae22b0ea778fd46b6575d07ad88ecf32c1eaf40731
-
SSDEEP
192:hruWdJxk8VAyc2hXwdgfMjVldk9uLimYCkakLjWUmaeg:hruW37cqXnfMjVHkQGCl4WUm+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3674e2bfb1962bd9e2f176b6cfe17d7e_JaffaCakes118
Files
-
3674e2bfb1962bd9e2f176b6cfe17d7e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 872B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE