Static task
static1
Behavioral task
behavioral1
Sample
3581d69b1028a10895ff5be0814a6095_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3581d69b1028a10895ff5be0814a6095_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3581d69b1028a10895ff5be0814a6095_JaffaCakes118
-
Size
152KB
-
MD5
3581d69b1028a10895ff5be0814a6095
-
SHA1
d863325c0ba181035722e90f59ad51cf057f6fe1
-
SHA256
fd38fbbeb4b2092e0f2f8c6bf27dd24fd932d3b7a053a1feb2f5e3bdde4f4bfc
-
SHA512
e9e49fdebe2a150cc7243a79aabda03c45d297d1aae5ac21c4d82dea722578753e66bd51f83176b98d02b6c139786550083d3d4658d9d199af3cbb22ac094c50
-
SSDEEP
3072:nqyQhMpBQ2Pd0Re85x5U2UArsm4RYWQn13XYZyhA41Epum4RYWQn13XYZyhA41EV:tQhMpBQ/M85x5UzhQnRXYYA4iohQnRXI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3581d69b1028a10895ff5be0814a6095_JaffaCakes118
Files
-
3581d69b1028a10895ff5be0814a6095_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 33KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE