Static task
static1
Behavioral task
behavioral1
Sample
3b3ca59ad5ec4774ac23d291aad24c5e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3b3ca59ad5ec4774ac23d291aad24c5e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b3ca59ad5ec4774ac23d291aad24c5e_JaffaCakes118
-
Size
28KB
-
MD5
3b3ca59ad5ec4774ac23d291aad24c5e
-
SHA1
fd994a196fa800a4b13548ea53eef146d26a3d8b
-
SHA256
ee826eb9feb9c4d3c8e2bdb8f9c8b62ec0745b07cc14c098af3bf590111067a7
-
SHA512
4660fa2603f84ca283335bace2fb0d9dacad64b4ffd76e7bd3615c5ac89f766e001bd958e1c4e61624761d560c5e63ffb52317d30b4dc9c37d90b2afa5b7bb25
-
SSDEEP
384:BrEjtjxc9s4G19gZbhBRTWZRVoNJzFblfEipXNuV/+3EwOs6RgWVfCxYUxX:Br0L4+Kb/EcN3blfvpo2O/RNmX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b3ca59ad5ec4774ac23d291aad24c5e_JaffaCakes118
Files
-
3b3ca59ad5ec4774ac23d291aad24c5e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.SECURE Size: - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SECURE Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SECURE Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE