Static task
static1
Behavioral task
behavioral1
Sample
3713d79c3671136a46812d922cf383d5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3713d79c3671136a46812d922cf383d5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3713d79c3671136a46812d922cf383d5_JaffaCakes118
-
Size
45KB
-
MD5
3713d79c3671136a46812d922cf383d5
-
SHA1
e969a998e921d463bb3aef8a55fa785828dcca43
-
SHA256
1db1038416e6efd7789e662d5751d40151e5eace3c2a6ddc5e6b0eb4b8b64560
-
SHA512
65bff3a7178928b4563c6dc230a8d2cd6ba63643e75efcdb5164b00c9dcf6e8a388124f6eb307b71fd614a74b3a15d7c41206ca7909ffb0df9f3ebb2d720be67
-
SSDEEP
768:uloe2o9pyS9GVcdwHJmTOe4NCo/yL0/P/FUxn/mRSCsdtS/P/zuxlD0MZxxT5qEY:ulNwOBMMSNCoO0/P/A/mRF6tS/P/zuPc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3713d79c3671136a46812d922cf383d5_JaffaCakes118
Files
-
3713d79c3671136a46812d922cf383d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ