Static task
static1
Behavioral task
behavioral1
Sample
3f3fb6c4a75fbb16b3e606ad8e2d02db_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f3fb6c4a75fbb16b3e606ad8e2d02db_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f3fb6c4a75fbb16b3e606ad8e2d02db_JaffaCakes118
-
Size
946KB
-
MD5
3f3fb6c4a75fbb16b3e606ad8e2d02db
-
SHA1
1df357189a51c817424e136cee8a7328c4909fd0
-
SHA256
3a9b139a1964f6aac91b667ac08d58be8cff754d1ab3bfa0f4481a173bbcda96
-
SHA512
3884859a336111886b262ceecb14e72a1c840a53e9cb3ab9a114590cade48fc759b6be57b7c5f6bd043c9d0611110e5f6f000ad813c57bc08a12bac23da24523
-
SSDEEP
24576:SYrawIcSkDsgxm9rbudn0K2BYiQPMn47s:lrawIckImjhiiQPS4Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f3fb6c4a75fbb16b3e606ad8e2d02db_JaffaCakes118
Files
-
3f3fb6c4a75fbb16b3e606ad8e2d02db_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.tr1p0d0 Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tr1p0d1 Size: 945KB - Virtual size: 948KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tr1p0d2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE