Static task
static1
Behavioral task
behavioral1
Sample
3605ab0c6ca3791d57cc6c1c040e83e5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3605ab0c6ca3791d57cc6c1c040e83e5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3605ab0c6ca3791d57cc6c1c040e83e5_JaffaCakes118
-
Size
171KB
-
MD5
3605ab0c6ca3791d57cc6c1c040e83e5
-
SHA1
3c8c2870e9d3bd141ffbdb50dc9ba56e0180687c
-
SHA256
ec360e6ce4dcd0d67e9b6adc839cbef43e42370d76b24b868d18720e379cb50e
-
SHA512
03c28b740d5753425d1dfadcbabe9ca95bd5ab5dc4096702971c19918f3780b6301f4f2d36d3fb6d970995e8b6398cb14fcabb03e7a29d0195d180f96dbc6adf
-
SSDEEP
3072:zew9lNQcRDRjXGCTlU0W+WS3oZPWsotHLD7cUR0XCfTs6EcPzrc77OWw8x8c:qUvQcfimlbWd1ItrcS0Xyc769/c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3605ab0c6ca3791d57cc6c1c040e83e5_JaffaCakes118
Files
-
3605ab0c6ca3791d57cc6c1c040e83e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 13KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE