Static task
static1
Behavioral task
behavioral1
Sample
3b3e9a85f8565433f781c814c89d0d23_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3b3e9a85f8565433f781c814c89d0d23_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b3e9a85f8565433f781c814c89d0d23_JaffaCakes118
-
Size
15KB
-
MD5
3b3e9a85f8565433f781c814c89d0d23
-
SHA1
8ad07e011ea6544445adfc3920688c03d4b40f5e
-
SHA256
594b55624221fd6ed2751bdf89eb0fe3ad35f6a766c65100faa8f32c1b0f8f64
-
SHA512
04f56dc5b9fec9333b86c6fe87c19fa1f2e6853e0b0ee8e7eb540b8f76bf6b9ce9c04548367c1f16ba167fdb9f8abe6ae3a302c4b87eacd2521491014812930d
-
SSDEEP
384:QFEaYf4JfOejqM1EEimZeSmjhhQUltpskw3DtnlbY:QFEryfOTM1omZXmVBRLqnY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b3e9a85f8565433f781c814c89d0d23_JaffaCakes118
Files
-
3b3e9a85f8565433f781c814c89d0d23_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 55KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ