Static task
static1
Behavioral task
behavioral1
Sample
3cd1b8628a7605d68ab5114b1a6f2f0b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3cd1b8628a7605d68ab5114b1a6f2f0b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3cd1b8628a7605d68ab5114b1a6f2f0b_JaffaCakes118
-
Size
16KB
-
MD5
3cd1b8628a7605d68ab5114b1a6f2f0b
-
SHA1
c4ac0ebc1f7ebed7965f8b24e89f05a0f7ea8ce5
-
SHA256
2fe7562bcc927985d2ecaf269354b0e2b3e8bfe635ec5480a3f3012f5294f68a
-
SHA512
48c49d3f58d8e6839da409fe25161a43e21e3ec4161c955250dd2bc76630da74b9dcfc330dba4b78ffd3017c643f72cab4d3d35dec85fd0af36447b33a8fc96b
-
SSDEEP
192:B3Tk5HBJXRu2NJX7SVm5Kj/5VtHck2V/iCTRT4+BBIZZMuqx0g:B3TcHTRuurS45KrZ8kUaihS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cd1b8628a7605d68ab5114b1a6f2f0b_JaffaCakes118
Files
-
3cd1b8628a7605d68ab5114b1a6f2f0b_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.icode Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE