Static task
static1
Behavioral task
behavioral1
Sample
3b885276e0d33af8fdf6f4a280957a69_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3b885276e0d33af8fdf6f4a280957a69_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3b885276e0d33af8fdf6f4a280957a69_JaffaCakes118
-
Size
55KB
-
MD5
3b885276e0d33af8fdf6f4a280957a69
-
SHA1
8aabc5aca1761e68827e53a9cfe8317395b35038
-
SHA256
96aad12e29334c33cd7015a5bd76c2629e7769ba41cd938e61728d303f434ab1
-
SHA512
11004d8657829f0fef954e06b141e190572f3e7d085afc7e3b58ada7cc8106decbd382b2844828f0fbecd43dd97e74877509346b73b2fa28067683f374871bc4
-
SSDEEP
768:+/sfv5dZCzumPgHrS7A7UHXvkXrZpEDw9jsvVMAcQadvjMskEHyYZ:+kfxPCz7PBKAUrIkQklb5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b885276e0d33af8fdf6f4a280957a69_JaffaCakes118
Files
-
3b885276e0d33af8fdf6f4a280957a69_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 432KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ydpszmfu Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mmabfdzr Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE