Static task
static1
Behavioral task
behavioral1
Sample
3b759aecdc51c4f4c406d941363fe416_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3b759aecdc51c4f4c406d941363fe416_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b759aecdc51c4f4c406d941363fe416_JaffaCakes118
-
Size
533KB
-
MD5
3b759aecdc51c4f4c406d941363fe416
-
SHA1
064c89337f2ac12a83bc23403d87da655eca3885
-
SHA256
d64ea75915cb33c0eb91176a31cf50509e765a30d99f34d8337ca628301ab008
-
SHA512
d0858ffb73714effa61fb4cd155cb4ce77bdf30f20f9cf79bd58984eda67de04f7d9c04ef717d962693cf4af0f7071595cb02dbba0e611a801669d7d08317cdd
-
SSDEEP
12288:/+ouh0GSPNiV2QTAgicUx+GlzCjQLuCW8owB2Cs34x9RO87:WBOGSo2uAgijojQKdwB274x+0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b759aecdc51c4f4c406d941363fe416_JaffaCakes118
Files
-
3b759aecdc51c4f4c406d941363fe416_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
EPE0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EPE1 Size: 524KB - Virtual size: 522KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE