Static task
static1
Behavioral task
behavioral1
Sample
3a939bf8c84fb5e27a527f10d2938dc3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3a939bf8c84fb5e27a527f10d2938dc3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a939bf8c84fb5e27a527f10d2938dc3_JaffaCakes118
-
Size
145KB
-
MD5
3a939bf8c84fb5e27a527f10d2938dc3
-
SHA1
b6d65cb31116075ce2960a810620c07e859d847e
-
SHA256
5cc8183b0d04a1c8a45ad23ca59cec4848d56466591d8f35ff373ba0ec5041d5
-
SHA512
8f778380db164e83bcecf933f55610a8f75082687bdb79b9c2f85fefc29531cc2bca599c7d7b5b30b2ee9ec1443a949fd048b836685a79b4ac3692fc20579462
-
SSDEEP
3072:RmXTLdvPFfj1Ky33bbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7/0yoC4h:RqJnwvP6bQ7yMP+DE827/xovh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a939bf8c84fb5e27a527f10d2938dc3_JaffaCakes118
Files
-
3a939bf8c84fb5e27a527f10d2938dc3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 21KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE