Static task
static1
Behavioral task
behavioral1
Sample
3ae903b3350a06b1d0999a7eadc8ccb5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3ae903b3350a06b1d0999a7eadc8ccb5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ae903b3350a06b1d0999a7eadc8ccb5_JaffaCakes118
-
Size
334KB
-
MD5
3ae903b3350a06b1d0999a7eadc8ccb5
-
SHA1
0739b457225170ba0e89e05158b93cb0a5663c86
-
SHA256
ae891e19add9a8d2b02524d439a0a1e7654d9de4fdf5fcdda73fd7f2f62bf9bf
-
SHA512
6bf52e2fc1f3a378c78aaf227ec6bbe7a0e15dfa2a4ba8b032e7e83a1af4924b4df08d6c2143f8996dda16ddc155045bf40a229a915e6dc95c9470124de82c32
-
SSDEEP
6144:6NUUOZxCK8RkRwYLN6F+MmDX9X9TU+w/VyyEyUe7B2v6CeZlDQnO1p+h69a3rnsQ:/P9GYFvo/VxE4B2SC4qnO1p+Oa3br
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ae903b3350a06b1d0999a7eadc8ccb5_JaffaCakes118
Files
-
3ae903b3350a06b1d0999a7eadc8ccb5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.icode Size: 901B - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.packed Size: - Virtual size: 3.0MB
.loader Size: - Virtual size: 432KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.null Size: 331KB - Virtual size: 332KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 923B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE