Static task
static1
Behavioral task
behavioral1
Sample
3c576c2123743c4cb55103d8e9c25d05_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3c576c2123743c4cb55103d8e9c25d05_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c576c2123743c4cb55103d8e9c25d05_JaffaCakes118
-
Size
104KB
-
MD5
3c576c2123743c4cb55103d8e9c25d05
-
SHA1
fea9a15a58a9c0560395c10615837567796c4621
-
SHA256
c3d8c31582e7b549c0faf2ed0f83da920702584a8a109e8cdc5d32c690610fd7
-
SHA512
8775f631f36db69cf38e93aca1353bd37479b8d79dc106750ceee02fb3ade46075accf1ed88e6f47234cbafd994f719f775c1d4fc2de546cefb10774e3aea102
-
SSDEEP
1536:Su0VNp6oaJo0N4s/5bFZslNDyZVHsOLKcNetBP1ib2h6w7NV5Sxoywf2oPlJ4lIr:SKvvRZsCHsOtqPj4oRf2iPr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c576c2123743c4cb55103d8e9c25d05_JaffaCakes118
Files
-
3c576c2123743c4cb55103d8e9c25d05_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE