Static task
static1
Behavioral task
behavioral1
Sample
3cbc54e28d315c8844b5e3a2683262d5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3cbc54e28d315c8844b5e3a2683262d5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3cbc54e28d315c8844b5e3a2683262d5_JaffaCakes118
-
Size
144KB
-
MD5
3cbc54e28d315c8844b5e3a2683262d5
-
SHA1
018d3271720bf0e59ce40453746cdc1bdc79800c
-
SHA256
c1a130ab0f14d2665431ac1fcf92b75d07f0b25a4d36c2e6c024805bb2f78dcd
-
SHA512
e22b3aacd9e5a79a189acced44a1451b35e2ed1a805b0f5de42c7b427d155e18004e999f17db42213b06eacf4d067873caf4412dcf5e4fa528d43a1c7d9d14fb
-
SSDEEP
384:J/obupXPJvoQOHxk1dq0EGrXI58obeYJ6G:J/8upXPJv6HG1rEGsGoaYJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cbc54e28d315c8844b5e3a2683262d5_JaffaCakes118
Files
-
3cbc54e28d315c8844b5e3a2683262d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NTR0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NTR1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE