Static task
static1
Behavioral task
behavioral1
Sample
3b77e8f2eedd67f9d29301af32b8c77e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b77e8f2eedd67f9d29301af32b8c77e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b77e8f2eedd67f9d29301af32b8c77e_JaffaCakes118
-
Size
525KB
-
MD5
3b77e8f2eedd67f9d29301af32b8c77e
-
SHA1
e84f3fdc10a028e6d611e4814f192fa12e80b9d4
-
SHA256
6174ffb028d1790710a1ff2fcd0c755662b48aedfa4ce0eaec42578ebf81fb9b
-
SHA512
cdc668efe4d0aa08741a438223f1d83330317d8f792d5dd202cd7879cab9b4f299cb3ea78b380c5de6b5a81d1988017dbc3be75ac1b9cb807127a2d3d037c35e
-
SSDEEP
6144:cPd3Bi16VdIagbcLTWPCL+eHgW9dlqNtLC58hjOW0lhI5N8rOEuunfxBRxZcHPOD:+pBi1tOGKI6VZcHZvYY94Y2Iy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b77e8f2eedd67f9d29301af32b8c77e_JaffaCakes118
Files
-
3b77e8f2eedd67f9d29301af32b8c77e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 9KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
system Size: 502KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE