Static task
static1
Behavioral task
behavioral1
Sample
3ef13755a5d6fb4ed96abeff24bc0fc5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3ef13755a5d6fb4ed96abeff24bc0fc5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ef13755a5d6fb4ed96abeff24bc0fc5_JaffaCakes118
-
Size
88KB
-
MD5
3ef13755a5d6fb4ed96abeff24bc0fc5
-
SHA1
4393924111890bb1cd9f1d5c68b0fc271a9ab6ed
-
SHA256
df9a3e4115a499694a659f9de9e54f6dccbf91e7af190ffb137ae6458304b2d3
-
SHA512
0ce89235bd6599d132d7337d12caa3abb77c9186dab4aafe67bfe9774d028a5c9100d49a60cb3f26254b080396e6c72d21bc9ece62d30b1a3eae876ac43344a1
-
SSDEEP
1536:etZHJGPKZi+unw3uzV1cuuAVBljDxppoNr9hTcOujjwGTr0aIiksSaV1K7ZNZ:M3GCZi+u93XVBR2Nr9hoOVGToadTutNZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ef13755a5d6fb4ed96abeff24bc0fc5_JaffaCakes118
Files
-
3ef13755a5d6fb4ed96abeff24bc0fc5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 35KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 33KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE