Static task
static1
Behavioral task
behavioral1
Sample
3ba8e42d1e94459bee59475695eccb89_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ba8e42d1e94459bee59475695eccb89_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ba8e42d1e94459bee59475695eccb89_JaffaCakes118
-
Size
64KB
-
MD5
3ba8e42d1e94459bee59475695eccb89
-
SHA1
f6417bd535c6705b1071ac6f3e3d43e15f7bd4d3
-
SHA256
bd95546e966dbd500e427b53ff13b04d124cab0182554e40342409ff9e9a2b51
-
SHA512
20f8c2ab5633394add8b7dd56ff4eda470aa5ba096cd63b23d7f52d2fa575e3ba254118e4b8bd27838fccc0eedc643e6ebf29c386e7fafeed27975cb4ea0b769
-
SSDEEP
768:W/ciZE1grZ1STorpvJNLxygHVyaaGDIq/0HsoOQR5k+LlwZ1N1TntOh2njXJ/ZCP:WUiSgrZgKHN4nJmrieio1N1ROhIrJsP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ba8e42d1e94459bee59475695eccb89_JaffaCakes118
Files
-
3ba8e42d1e94459bee59475695eccb89_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 55KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE