Static task
static1
Behavioral task
behavioral1
Sample
3443d0aee6f9bfce58ca0d0e20bc77e2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3443d0aee6f9bfce58ca0d0e20bc77e2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3443d0aee6f9bfce58ca0d0e20bc77e2_JaffaCakes118
-
Size
122KB
-
MD5
3443d0aee6f9bfce58ca0d0e20bc77e2
-
SHA1
34b563ac798ca080e0f5de5702524a2150389e2c
-
SHA256
aae4d7a823dac51a011f931b0d6e7f63da902c5d4c5184ce3e0bc4fa17299eff
-
SHA512
c01314f147a8c71ce36d6a2cfd3f4b07ae1038fbd9ee034c1d1019dae595ff9be61485b2ebfc91d0d18f768d5516a253ff92464aaf9090e6273cd89f7d9a6c80
-
SSDEEP
3072:eNjjAJHhlXHWA2J5yl4bSNlQrxAOsBkkMRLN/+ThWemK/:eeJ123JH2OsqRETh4K/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3443d0aee6f9bfce58ca0d0e20bc77e2_JaffaCakes118
Files
-
3443d0aee6f9bfce58ca0d0e20bc77e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ar Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jm8qw Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eeg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE