Static task
static1
Behavioral task
behavioral1
Sample
3a12647bf16a3326f3628d462961db27_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a12647bf16a3326f3628d462961db27_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a12647bf16a3326f3628d462961db27_JaffaCakes118
-
Size
519KB
-
MD5
3a12647bf16a3326f3628d462961db27
-
SHA1
3f66156ac84403515b2ee4fcfc98272b1622b21b
-
SHA256
e6f547e50007c902cf3f8789aa4479b4388608ef55e68f22f1446b90ee42d4ba
-
SHA512
b2816075bcc4c3e809342a125fc2539b94b0438235cfdfd5178efee5524404889575d5840626b2010baf0d5c02443a9bc411a667ff7059d7b7ab6826f07615a5
-
SSDEEP
12288:ulQooJ//IuC0qj7GCVTVO/LgaK1MhxwDd4nDCcVwT:woJ//3AjqCVTw/LBUMhCp4nDCpT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a12647bf16a3326f3628d462961db27_JaffaCakes118
Files
-
3a12647bf16a3326f3628d462961db27_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.3MB - Virtual size: 8.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE