Static task
static1
Behavioral task
behavioral1
Sample
3bbfdf8999f520f3f0c151ec7c58128b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3bbfdf8999f520f3f0c151ec7c58128b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3bbfdf8999f520f3f0c151ec7c58128b_JaffaCakes118
-
Size
53KB
-
MD5
3bbfdf8999f520f3f0c151ec7c58128b
-
SHA1
1e726e51c4caa1cca34f654360958c3b8226a26c
-
SHA256
c86eaa20f3a82e117f11b5c36a295206baa8c0fe36381fc5dd8cf9f4b11560e6
-
SHA512
a5a15e374e57965ea63abe5b16aec5db01102b8a30a215e77e5a731b1971ee509cd97c711631ecbb6d01a941536aa82888dea0cf38187ff741506dc3fe4097c8
-
SSDEEP
768:FDCOc6rVtOKdEJk/ZkxreSeWUHzliFWvY6Y2L0MJmQeto5DUU86NDKxOAc4ElZb:F2OcKQKvBWUTO12Ywe4YCDiZEr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bbfdf8999f520f3f0c151ec7c58128b_JaffaCakes118
Files
-
3bbfdf8999f520f3f0c151ec7c58128b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE