Static task
static1
Behavioral task
behavioral1
Sample
3c06ac4e399c8917a7d1a20f46e3405b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c06ac4e399c8917a7d1a20f46e3405b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c06ac4e399c8917a7d1a20f46e3405b_JaffaCakes118
-
Size
55KB
-
MD5
3c06ac4e399c8917a7d1a20f46e3405b
-
SHA1
c9d4bb28a95527789c722e14c11cf38b5638f20b
-
SHA256
a9a99344c85b1cd3e786ad96610e9e71406828508e8c9c3aba7e61599f8133c5
-
SHA512
be6c8869718580a3ae0641db30a3cf25ee38cb090ae544912c8e0197ea7d86b1725d939b95290867fc005d4da2372aa2f5f345a17ec0869cffcd7ce8687dd2bb
-
SSDEEP
768:0I07zy0IQ5XXn/pp0RdceBi4d3IalnPZk/Rpd1JCmXrz4UwtlWhwlpdtgY3AGkPl:0Is9IcH/gRmeBi4JdkpgGhj+pgykPl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c06ac4e399c8917a7d1a20f46e3405b_JaffaCakes118
Files
-
3c06ac4e399c8917a7d1a20f46e3405b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.TEXT Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RDATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ