Static task
static1
Behavioral task
behavioral1
Sample
3f2ec2df578d1c155165007811d77405_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f2ec2df578d1c155165007811d77405_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f2ec2df578d1c155165007811d77405_JaffaCakes118
-
Size
13.5MB
-
MD5
3f2ec2df578d1c155165007811d77405
-
SHA1
e078013f3ce30e20d38281adcdb60d987e01eafe
-
SHA256
b81e387c88d5ba678b730ec054a7b4bb9d7e39e3c087f8a63e1c0e2c4e1f0cb1
-
SHA512
6e0e00c5e0701fbbbc63a748c998c8b2ce99f8e3b6e6f49a1e33e6651173b7e1685e46a05a01d83f73cf3ac18d2c09677bcee0969a8fe9d0c63a3c52c5534330
-
SSDEEP
98304:4BAK5H+4wor4ZjL+TfLv2Ax7skk8EcKjLhTFia1js:4Bje4wQ4ZjL+TfLv2Ax7skk8zKpTF1O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f2ec2df578d1c155165007811d77405_JaffaCakes118
Files
-
3f2ec2df578d1c155165007811d77405_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 924KB - Virtual size: 924KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12.5MB - Virtual size: 12.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nPack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE