Static task
static1
Behavioral task
behavioral1
Sample
3bd7bb54de747b128b778f397b490c6e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3bd7bb54de747b128b778f397b490c6e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3bd7bb54de747b128b778f397b490c6e_JaffaCakes118
-
Size
319KB
-
MD5
3bd7bb54de747b128b778f397b490c6e
-
SHA1
173be2fbc732d12e32d8f18e073c22290815888f
-
SHA256
79a9e69868651f41ae363e32e5e5043c47a7652044b87809999e1451a3b8f0ba
-
SHA512
d01b7c5d3e01b157c3e52b52b2433dc6801fcefa86a2f7e076192e317a5641330ef945c8e6421990c936115a0b33ecab887c9ac7b1da0863e8c89283283ae4cc
-
SSDEEP
6144:nGLu2t2Nitqvfk7t7TvPDbe+MPhfHabbXh5SSHQ8tr2dfHBtblgQY0ajz:/CYvfkZv3DM5UR5oS2dbkz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bd7bb54de747b128b778f397b490c6e_JaffaCakes118
Files
-
3bd7bb54de747b128b778f397b490c6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.thc Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE