Static task
static1
Behavioral task
behavioral1
Sample
3bd1d6e6a26a8afe480c59b45f8d387c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3bd1d6e6a26a8afe480c59b45f8d387c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3bd1d6e6a26a8afe480c59b45f8d387c_JaffaCakes118
-
Size
477KB
-
MD5
3bd1d6e6a26a8afe480c59b45f8d387c
-
SHA1
8d888b88acd94d27c5a76de173f3763fc494f6bd
-
SHA256
959a8880707e1b5df345e9aefd2d89bdb36a6734159495c9a82e0d6ef9deed3f
-
SHA512
f1b92f796713cbdc95df5b8f6269571b883b9c908ddcdc808bb8a17fbecb9f60915a264cb3a3e8100e3f259d1566e6ba07c878bb03f3502cbfcfd8ed4ec85152
-
SSDEEP
12288:aNHzc7m10xMh9y8qwlFktznHbbUQN0TLv:0Hoih9y8Z7ktbHfGLv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bd1d6e6a26a8afe480c59b45f8d387c_JaffaCakes118
Files
-
3bd1d6e6a26a8afe480c59b45f8d387c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 116KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Virus Size: 352KB - Virtual size: 852KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE