Static task
static1
Behavioral task
behavioral1
Sample
3a41087f12fd99eeab325d168e237d19_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3a41087f12fd99eeab325d168e237d19_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a41087f12fd99eeab325d168e237d19_JaffaCakes118
-
Size
856KB
-
MD5
3a41087f12fd99eeab325d168e237d19
-
SHA1
46b7c91e631210d2475d64b27d521cd5aee4c486
-
SHA256
03ef9e68f1f47a8646d4fe5a63ce8d19534f9430d0d63633e9933878060c13bc
-
SHA512
51abad80497cbe25dfbb2cfd489cb893a7ccfba2af63724e5c966f8b957305b354f61d9757b216e201b1260eaa0f2ac2846157d8455b00c74fba7a899b852c24
-
SSDEEP
12288:xOr31TfDM43uJ8ZloFvjO5p+kqsWKUUu2MVHQctmlrXduO7dzlFfmtY:SLS8I9O7zqsXuLkpxl1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a41087f12fd99eeab325d168e237d19_JaffaCakes118
Files
-
3a41087f12fd99eeab325d168e237d19_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
peC Size: 852KB - Virtual size: 860KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE