Static task
static1
Behavioral task
behavioral1
Sample
3a16d4e2813a64073192f5d43d198f26_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3a16d4e2813a64073192f5d43d198f26_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a16d4e2813a64073192f5d43d198f26_JaffaCakes118
-
Size
81KB
-
MD5
3a16d4e2813a64073192f5d43d198f26
-
SHA1
1ea1b0342f2f4953b80fc3ccd713d496da103168
-
SHA256
ff7e95cbb95ea4319fc09d1cbebc148237e303603901a7004411ae088de25a6e
-
SHA512
5579f35e034e123f90d4f94e75bc924122cf4ca1b5b532b58a90df52197cba672ffe531c4bdd041226b41960f5d55555edd52289cf34c39f79bb2fa93f13044b
-
SSDEEP
1536:f958UEfYVP/CUiqJA8ickdNqGJbNL0fHppofzOhk3UvBTgVVQav6WRl:fAUWIP/C9oVi5d3tNlfzOefV6fAl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a16d4e2813a64073192f5d43d198f26_JaffaCakes118
Files
-
3a16d4e2813a64073192f5d43d198f26_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 32KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE