Static task
static1
Behavioral task
behavioral1
Sample
3af04b1c82c45a740781592b2d61b281_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3af04b1c82c45a740781592b2d61b281_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3af04b1c82c45a740781592b2d61b281_JaffaCakes118
-
Size
312KB
-
MD5
3af04b1c82c45a740781592b2d61b281
-
SHA1
63e2a1f5fa748967600026c0ffbedeca38ae7023
-
SHA256
34eed040f66e12361decd770b6fff339739f01fd7ca41be6610ad928dce60967
-
SHA512
243a54c0307a7d94ab6dec1acfeafff5ff86bb55de8e85b9aa2e946167c829d3851a3fdba7b2d1160ae5d808d0429e382fddce0e1bc148f1b81ab16bb83767b6
-
SSDEEP
1536:LvxufAm82f5BQ+gDI4DovdJViIbwoOw2HWxXDTGRNod4ErdZEca8nk/omdRAF:Lv8fHPf5V4KcI0zzvAF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3af04b1c82c45a740781592b2d61b281_JaffaCakes118
Files
-
3af04b1c82c45a740781592b2d61b281_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 300KB - Virtual size: 298KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ