Static task
static1
Behavioral task
behavioral1
Sample
3935730f8d1bbcc77aa3c01873aa7b64_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3935730f8d1bbcc77aa3c01873aa7b64_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3935730f8d1bbcc77aa3c01873aa7b64_JaffaCakes118
-
Size
104KB
-
MD5
3935730f8d1bbcc77aa3c01873aa7b64
-
SHA1
6dc26b233370049d07879187f15787175c309af3
-
SHA256
d446f3603b636edd4a9de83e7edd3b7b35b8a229498564c4183fb73b74c836cb
-
SHA512
11cf609f93dab2e3f1898af9b610acec7fd62b1cc1fdb44cd5eb138c4ac585e84a2604226984b176811afc1010dff34ad9f727df2f94da1ab522bd4b0a3cb099
-
SSDEEP
1536:exKb4IigDUPNu1CXP8E6iJ3W3ksaqtXXu+IQYXuPbutrxz/TPkfJSTTA/Pk/p2n9:elEUFkaTaBextC2LTP6sTBKUI8DD4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3935730f8d1bbcc77aa3c01873aa7b64_JaffaCakes118
Files
-
3935730f8d1bbcc77aa3c01873aa7b64_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ