Static task
static1
Behavioral task
behavioral1
Sample
3b3a8d0ffbfbc646b8c80649f2035760_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3b3a8d0ffbfbc646b8c80649f2035760_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b3a8d0ffbfbc646b8c80649f2035760_JaffaCakes118
-
Size
418KB
-
MD5
3b3a8d0ffbfbc646b8c80649f2035760
-
SHA1
a1157eced72aaf5f93acc1b29211d3f50d06f95d
-
SHA256
210da940db4feb0fc3d9c07a62165be65e870a4403630313744131bf56997bf7
-
SHA512
fa0e9bdc57927c9900cc996c531aea6c80638a35281f9eb235afa5bcdb92090b5fb98a988cc485a1e799b55ecf65a834c59e117deb7b688ec3147dfd9d13d872
-
SSDEEP
6144:FNdfZIvqZxAzt3fpHHr1RTn95pskIbHPpL+YWEBHPMUQ/o+njKQFVq/Y6kC0MjQB:FAq0jHLzR5pBIbvptDHYn2QFYkCvERM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b3a8d0ffbfbc646b8c80649f2035760_JaffaCakes118
Files
-
3b3a8d0ffbfbc646b8c80649f2035760_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 378KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nah Size: 151B - Virtual size: 256B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE