Static task
static1
Behavioral task
behavioral1
Sample
3b559c622d601fa8d861d75fb475d398_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3b559c622d601fa8d861d75fb475d398_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b559c622d601fa8d861d75fb475d398_JaffaCakes118
-
Size
214KB
-
MD5
3b559c622d601fa8d861d75fb475d398
-
SHA1
b4fa37354ea1a87c4e21ab2b05218d39ae634a45
-
SHA256
26a810c2e5e6594b8d1d2e43536fb859cebb6370281ede62c2fe38f43146cc1f
-
SHA512
8f2b2ad9f50110ac323e8b72cd136a6b2f87132d5de9438fc9ea08996cbc86d79b3523a1bf2461b973f4016ee8d490ce872fb66c3104ef6e3c64b709208e6cab
-
SSDEEP
3072:o0hB7vNmvHreshvH8VR63JijbA7rLZgEo8P6mU+skjxa5K4wwPZkj0l:oSqvHresh0TUY8+8SmJs8T4hP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b559c622d601fa8d861d75fb475d398_JaffaCakes118
Files
-
3b559c622d601fa8d861d75fb475d398_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE