Static task
static1
Behavioral task
behavioral1
Sample
3a9b20906a43c9b7bdd7ff4cc65298dc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3a9b20906a43c9b7bdd7ff4cc65298dc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a9b20906a43c9b7bdd7ff4cc65298dc_JaffaCakes118
-
Size
1.3MB
-
MD5
3a9b20906a43c9b7bdd7ff4cc65298dc
-
SHA1
5a4bf8828c66a7db26aa790211abd384f5a2d61c
-
SHA256
e5e297e9a0b770dd366fe77425b6206d3d947c80b167d4afaa3a8fe25b373fd9
-
SHA512
880cb9ca0beb87f7e9d371f1d316c3425e89696324fac5c3ba5beb8bba72929d2330f5f36b9e710f54a99c9438d5ba60695a65afe08830da08ae4de792dbb2e3
-
SSDEEP
24576:unmeJlvuenlvjkaIMnhlHra8+3BlllsmX:TClRFcqhBra8+3B7h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a9b20906a43c9b7bdd7ff4cc65298dc_JaffaCakes118
Files
-
3a9b20906a43c9b7bdd7ff4cc65298dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 644KB - Virtual size: 644KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Pav Size: 696KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE