Static task
static1
Behavioral task
behavioral1
Sample
3b2170a01aa91d93a44165182dffee95_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b2170a01aa91d93a44165182dffee95_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b2170a01aa91d93a44165182dffee95_JaffaCakes118
-
Size
1.3MB
-
MD5
3b2170a01aa91d93a44165182dffee95
-
SHA1
b025cec4c3ef6cb62efe3c09490e3a0fd6440bdd
-
SHA256
f6a3a92ffe059a897fc6481314ef61b6a043f27278e8608019ac2586b4b4402e
-
SHA512
a88c3f42dbbe1ca1173e10d68be3970af899c929685de44091ef20521e18855f632379f9b8fb4309cf0a1d8a4e4b96cde6273798a598d3aca0eb209522e9eaf6
-
SSDEEP
24576:x1QBgHNq+3CPApqg5tOri1LMj32Q7jFad+g3l+N02wli/Z4XKhMevoXJ/:x1QyHI+yPApFP4XjBg3lQQkZaXN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b2170a01aa91d93a44165182dffee95_JaffaCakes118
Files
-
3b2170a01aa91d93a44165182dffee95_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Setup Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE