Static task
static1
Behavioral task
behavioral1
Sample
3c1920f4c2e36c5f5cb7dfc349705b86_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c1920f4c2e36c5f5cb7dfc349705b86_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c1920f4c2e36c5f5cb7dfc349705b86_JaffaCakes118
-
Size
311KB
-
MD5
3c1920f4c2e36c5f5cb7dfc349705b86
-
SHA1
1893dfedb60070955e3f99a93493a161f3c9ed8b
-
SHA256
7099d38fed68ce9449a2b5413278ce4943f4b494db78024fdd00ee1e1d4da958
-
SHA512
2fadbdf0472c3976bb328a92374c04384dc45c341c1b35e1cc15bfc8d929b8a003fff5673534a26225ef74997f220cc9ec0c4581c659529d8296a2e38a62e251
-
SSDEEP
6144:lO0TiaH+7yMFUMK4wBgFb1TLdbbBV/y+IuHnVXMgr:lO0WaeeFMvwmb1TLhBV/jr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c1920f4c2e36c5f5cb7dfc349705b86_JaffaCakes118
Files
-
3c1920f4c2e36c5f5cb7dfc349705b86_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 40KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 237KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE