Static task
static1
Behavioral task
behavioral1
Sample
3bc605c32f4435d2abd27d6faffff7c2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3bc605c32f4435d2abd27d6faffff7c2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3bc605c32f4435d2abd27d6faffff7c2_JaffaCakes118
-
Size
357KB
-
MD5
3bc605c32f4435d2abd27d6faffff7c2
-
SHA1
8fc29c443e7ba73112380d1b936930b61527080e
-
SHA256
16344d09fbcd971fd284e9eb095d987c700a092d3e604204cf0f87068174e582
-
SHA512
012263b46e9308abc162e433fbd862506403e688b3d486256e66e0fd9a832f69b85b97b241aabaf59c9bb5927cad8bd02f96307add326072ff7799d77f7033e3
-
SSDEEP
6144:ijckxhGotqbSg9RsLvnQAFyhIOKFEjhLzNUTavglyrGtpk2oIPLtpLogTTPjTMG9:2xgJ79RCQRI7Edea2YepqIPLtpLTTbTd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bc605c32f4435d2abd27d6faffff7c2_JaffaCakes118
Files
-
3bc605c32f4435d2abd27d6faffff7c2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 312KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE