Static task
static1
Behavioral task
behavioral1
Sample
3aade6fcbcdef01d39135abf998acbe9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3aade6fcbcdef01d39135abf998acbe9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3aade6fcbcdef01d39135abf998acbe9_JaffaCakes118
-
Size
419KB
-
MD5
3aade6fcbcdef01d39135abf998acbe9
-
SHA1
e4d217b1c09f19a752218f38c4925548c08d74a7
-
SHA256
6dbe75f31b24054de9842954f8122a09899df4b7e44322bf22912dcc08e72117
-
SHA512
9dc29ccaebc0ada0ca696c338bbf577dc74d555ec1728a85b06f1402b3c071050f982dd2222f0b4a4085807e593e053ecaad9ff3eb16465e2c4c502df4c7ede6
-
SSDEEP
6144:YEc424i8FzzqBrNQhoC4jM5bQ1dt4U8xApz/orIiY5+HCp+RKe/Y/k1ReGoCR+Oa:ZcppKzoKbk4SDoctkHCURj/51Vxd4F+o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3aade6fcbcdef01d39135abf998acbe9_JaffaCakes118
Files
-
3aade6fcbcdef01d39135abf998acbe9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 2KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 125KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 290KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE