Static task
static1
Behavioral task
behavioral1
Sample
3c506694b4d41895850ac707879b76f4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c506694b4d41895850ac707879b76f4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c506694b4d41895850ac707879b76f4_JaffaCakes118
-
Size
131KB
-
MD5
3c506694b4d41895850ac707879b76f4
-
SHA1
107c97b4bd3919ed3d52efd9d8aaa0f3d87eab85
-
SHA256
b44251ab9fc0e8ed4d5483b65e80121107bebff230400498d451005f0d89e4e3
-
SHA512
5ea69d4a858b7064bb3e64b0f7ad1cc788a540acb732f3d26f4c660c5288a75cee9aa4b46c058e87f2203f161a91cc82f31e7461081f37b0b1f9b2d5ff1b7bac
-
SSDEEP
3072:5Q4qob6ilKtDvUCMRYiMGiAaq0yr/dJAdc34RtNe2:nbjMZURYbnqR7rbIRi2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c506694b4d41895850ac707879b76f4_JaffaCakes118
Files
-
3c506694b4d41895850ac707879b76f4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.ghofaj Size: 31KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkxwr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bmd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vwh Size: 512B - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE