Static task
static1
Behavioral task
behavioral1
Sample
3b6a26a4241a95e0d1e4938910cbd95b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b6a26a4241a95e0d1e4938910cbd95b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b6a26a4241a95e0d1e4938910cbd95b_JaffaCakes118
-
Size
29KB
-
MD5
3b6a26a4241a95e0d1e4938910cbd95b
-
SHA1
214546f6dd6def36fb1ee0a18667582136bcaa0d
-
SHA256
262d0c6479b41eec85e2624154650faff2001266f5b38ae7cbdd9d07bc34a156
-
SHA512
8fd2eedb24c92871755599fbb877e816034d129dbb75e3da81408a1c64b783d88f1c59fc9900d40fa4d2577c4ae220b1484c39b8ad877835e4587c9944ed40b6
-
SSDEEP
768:FuzEBQaXLp9F1ujIiucyxkcijrBDwxY2x8iS0PkZh3bG78bro:FuoBQaPL0Iiut0rBDBqPSh36w/o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b6a26a4241a95e0d1e4938910cbd95b_JaffaCakes118
Files
-
3b6a26a4241a95e0d1e4938910cbd95b_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE