Static task
static1
Behavioral task
behavioral1
Sample
3c5ec508a147c18d08d7eecfc4802dc3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3c5ec508a147c18d08d7eecfc4802dc3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c5ec508a147c18d08d7eecfc4802dc3_JaffaCakes118
-
Size
113KB
-
MD5
3c5ec508a147c18d08d7eecfc4802dc3
-
SHA1
884f180562447d2ec95c922e20438967c1a11d17
-
SHA256
85348bb25d2906baad3a55446383c939a62662bf938be9566494d5c3503731c2
-
SHA512
17333b2eafc7a3d82e5290be76dcdb30083a091710b0a7d4fe8f37a5d3b9648dab98632e0299bd795e760b92101abed0cc54fddb2e10cf83a84b1a8b9c9a8eba
-
SSDEEP
768:ZXcR0Ox/LIC1x9UXuwZLfBanrH1EGpmL+UX/3PpM+FH8hnyBnnN2cyLOmT:ZsR0Ox/LIC1x9UXf4pmq+/chyoL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c5ec508a147c18d08d7eecfc4802dc3_JaffaCakes118
Files
-
3c5ec508a147c18d08d7eecfc4802dc3_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 38KB - Virtual size: 1830.1MB
Size: 113KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
�v8�P�>� Size: 71.4MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ