Static task
static1
Behavioral task
behavioral1
Sample
3d0cfbdc85b6b01bb2a89bb4d558b53a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d0cfbdc85b6b01bb2a89bb4d558b53a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d0cfbdc85b6b01bb2a89bb4d558b53a_JaffaCakes118
-
Size
247KB
-
MD5
3d0cfbdc85b6b01bb2a89bb4d558b53a
-
SHA1
122259ea908fac09750d393e94d7b352fa969df0
-
SHA256
1bb0942df0d696f92b0378faa5dfbedac333c770cf27290666642ab6453a3c94
-
SHA512
f4d6255f07005f638014d665ae8a229309c78e536e82d9124c4174f4b5aa78b17ae7e010f5ec6407825be6b3e80e8d3891118174854d148382d02f96c469f505
-
SSDEEP
3072:uOjoN/T3sAO1IkA10AVL2RxCPjVyuxw7rVZnajR/IMt8V6Dm43Zy4+dbKX5RA3K9:FoNb7aA10LxCPYXbnEI/4AWX5C3K9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d0cfbdc85b6b01bb2a89bb4d558b53a_JaffaCakes118
Files
-
3d0cfbdc85b6b01bb2a89bb4d558b53a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ttttt Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ttttt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ttttt Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
aaaaaaaa Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bbbbbbbb Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE