Static task
static1
Behavioral task
behavioral1
Sample
3f4679ff099d7bf1c1ddbc1cd8f0c751_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3f4679ff099d7bf1c1ddbc1cd8f0c751_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f4679ff099d7bf1c1ddbc1cd8f0c751_JaffaCakes118
-
Size
356KB
-
MD5
3f4679ff099d7bf1c1ddbc1cd8f0c751
-
SHA1
0a02c660384cec55a901d4850cdc37f2a936a667
-
SHA256
0c25974175b8f1434d50bd7fde56a33683b0b597c11897ca5fe20f99fcf57eed
-
SHA512
ef1d8e8922294ec7bf4cb39bdb86bf79fa743de0598b1883c7f9aa4cc4cf6415c413a3bd006e78151c32ab566d59823d1f98891e66aa19cd9481eead2391f60e
-
SSDEEP
6144:Sb4jjMMREloM/Gl80J7JS67d/2Kbga2mn9j7iqWQD/9lNJp0eboPqmoXQ1TCnMfT:Sb4jwMWloM/GVJSAd/Vbb3xWqd0Zimlt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f4679ff099d7bf1c1ddbc1cd8f0c751_JaffaCakes118
Files
-
3f4679ff099d7bf1c1ddbc1cd8f0c751_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
9F>H!XsA Size: 512B - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LVP7J]rH Size: 355KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE