Static task
static1
Behavioral task
behavioral1
Sample
3c7b5d896741c5043a803c6e8fc77964_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
3c7b5d896741c5043a803c6e8fc77964_JaffaCakes118
-
Size
128KB
-
MD5
3c7b5d896741c5043a803c6e8fc77964
-
SHA1
b01255e3f38b1c0f7b8214494b55ece09f545b6d
-
SHA256
e09172922db7888352f847ad88f7bef575bc1815b051f344ec5d181f37c8365b
-
SHA512
7a5d571f39e0c9e390adb187c14e3bb55b19abdea9dc602df151ddecd599b1505668444848279c5accb136423d5e3571cca8df24f8dac042430c27f8b439b121
-
SSDEEP
3072:uGHi6mwH51zbCuJp33StFbnwGSvUqAWgYdBmow:+8LSuJ53SYGScWgY3N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c7b5d896741c5043a803c6e8fc77964_JaffaCakes118
Files
-
3c7b5d896741c5043a803c6e8fc77964_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE