Static task
static1
Behavioral task
behavioral1
Sample
3b9ea9a7dde93359bf75a58e0cc77e45_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b9ea9a7dde93359bf75a58e0cc77e45_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b9ea9a7dde93359bf75a58e0cc77e45_JaffaCakes118
-
Size
97KB
-
MD5
3b9ea9a7dde93359bf75a58e0cc77e45
-
SHA1
a9c0deeae2e36eb8981257c01bce7cf71a11fcbb
-
SHA256
c5a00f7756d5193e34a37a7ec674a41d4e9eb24e5e6691ed1c9a78e59aadcbc6
-
SHA512
245ae72863f0c495c0576882509b420fb61aa8989ea89152cca31527e1d2184b1d3200044dd6bb7e333888cd12a7368fae33521e118e2e70fe1662c1593fb0f0
-
SSDEEP
1536:1f08rie+ZNxPnO8NtZJXaFfHA20LNi5ucZyHJTb0/:4e+ZNxPnO8NHtaFfHA2cNi5ucZJ/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b9ea9a7dde93359bf75a58e0cc77e45_JaffaCakes118
Files
-
3b9ea9a7dde93359bf75a58e0cc77e45_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 637KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ