Static task
static1
Behavioral task
behavioral1
Sample
3b49a66f629ad602e1e4f5f87f453c2e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b49a66f629ad602e1e4f5f87f453c2e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b49a66f629ad602e1e4f5f87f453c2e_JaffaCakes118
-
Size
773KB
-
MD5
3b49a66f629ad602e1e4f5f87f453c2e
-
SHA1
a22fc82d38966617997c7c9f4f107704f8a11b31
-
SHA256
6202d5918c60366f04c0ea52551723be927f387d3f328ca7585250bd3d6ddf02
-
SHA512
85ab527885cdfa896dd266194327b369921c66a91378ac6ea13e5d2a5ba1cf8c3328c2f95985c188d38a018f6157bee6b798c86dc135e8a200f1340931c8f245
-
SSDEEP
6144:gksWnW4jIufl657naeleQxBwZuu8Ru8naKnWi9HLzbtdX3jyBPMR9yWI+tQ:gksWWUTflM/xyZebV9ztdQPMDE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b49a66f629ad602e1e4f5f87f453c2e_JaffaCakes118
Files
-
3b49a66f629ad602e1e4f5f87f453c2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 409KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ