Static task
static1
Behavioral task
behavioral1
Sample
3a0dc48df6a1e745e945b7b0a11a17ab_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3a0dc48df6a1e745e945b7b0a11a17ab_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a0dc48df6a1e745e945b7b0a11a17ab_JaffaCakes118
-
Size
207KB
-
MD5
3a0dc48df6a1e745e945b7b0a11a17ab
-
SHA1
eda36eede7f8722c5e66bb67a197eb82ee987747
-
SHA256
450920170b99c3165df5f8fa369b90819fc46b74680f9828f309ca8721d943ed
-
SHA512
965e502af7cde42a1aa78fc235cfba0461e2b19e03a44c0e842425e343aa29ced0628ae15095fd2c7eb9da69c1fa4bdfc542d5e4435f60cd47c051d47e6df507
-
SSDEEP
6144:59CIkm87lTlQuaSzSZ9vIGxOslDeG+DI+oy:qmwZfSZ9vIcOAk0Xy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a0dc48df6a1e745e945b7b0a11a17ab_JaffaCakes118
Files
-
3a0dc48df6a1e745e945b7b0a11a17ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 629KB - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ