Static task
static1
Behavioral task
behavioral1
Sample
3334842a42c7431691eeb8d723f96c65_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3334842a42c7431691eeb8d723f96c65_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3334842a42c7431691eeb8d723f96c65_JaffaCakes118
-
Size
3.7MB
-
MD5
3334842a42c7431691eeb8d723f96c65
-
SHA1
bd063b985cf7282a6a482f9c864d6b3e888c40d3
-
SHA256
9169560f4864ef0e93fbf2da615f43bd4196706b5a463bc3a5612f93f57aff26
-
SHA512
59c8523b273bd24c1daea38d1495ea33c9f4deecce726118b2992d44862a25e3649c7d8f310539c900dfa5423e509346e05a2408ba5e058b919c4689a6992931
-
SSDEEP
98304:Bz+YHEsFFp2NbmwohxdXey8OU51/QpTp879+CaEX4XCWw:BzzHTFTTJeyQ141p879HXB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3334842a42c7431691eeb8d723f96c65_JaffaCakes118
Files
-
3334842a42c7431691eeb8d723f96c65_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 798KB - Virtual size: 798KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 119KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ