Static task
static1
Behavioral task
behavioral1
Sample
3ade411ff0f97752856c6a6d2b8c957b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3ade411ff0f97752856c6a6d2b8c957b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ade411ff0f97752856c6a6d2b8c957b_JaffaCakes118
-
Size
325KB
-
MD5
3ade411ff0f97752856c6a6d2b8c957b
-
SHA1
6dae593560d75efc977119bec3c4bbadb4e74632
-
SHA256
836647f95704a8dfb618c42774fa9cb45dbc4771123bcbe07c923023454f2574
-
SHA512
6526db156ef6b56949a4087278734f207ed401277ca16b1a3268246c873e4bcac4ca7a13ae01995dfdbd1c3e479cf595dccf96288f79672ede0c9a90f4ff0cf5
-
SSDEEP
6144:eVzUUDdvoKLxThJvIgR2uNN9iBIDtIaWywR3qRX5cRLBfbZb:eVhdjL/IuL9iBitjPC9B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ade411ff0f97752856c6a6d2b8c957b_JaffaCakes118
Files
-
3ade411ff0f97752856c6a6d2b8c957b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 319KB - Virtual size: 318KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ