Static task
static1
Behavioral task
behavioral1
Sample
3cf75be437f085543b2be931f02ba467_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3cf75be437f085543b2be931f02ba467_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3cf75be437f085543b2be931f02ba467_JaffaCakes118
-
Size
162KB
-
MD5
3cf75be437f085543b2be931f02ba467
-
SHA1
9aaa6570ba75c00aca8102e59ac8f5c2836e52ba
-
SHA256
2c6c95e1b24079ed043356b80148f0ba4da0ab32d534e0f9e3a04ce8fdba2789
-
SHA512
c4e0984d6a4ec5b567eb83d2c06500c7a0858e96d729a71abc7fba3a419546568a492c35c51d3185a1a5b4fbc0343cc5c4749f8ba6960df24f376dd99d6edb5d
-
SSDEEP
3072:Em4GHbLjKlMd/CWJRj7RuT7aN6rBTuBnTLIQlmCDPTyL3W+Y/:EWjEMd/CAVIWNITuNTLILC/ya+Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cf75be437f085543b2be931f02ba467_JaffaCakes118
Files
-
3cf75be437f085543b2be931f02ba467_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.perplex Size: 58KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE