Static task
static1
Behavioral task
behavioral1
Sample
3d3b5c93ed65a7fdf9057d2750c00876_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d3b5c93ed65a7fdf9057d2750c00876_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d3b5c93ed65a7fdf9057d2750c00876_JaffaCakes118
-
Size
120KB
-
MD5
3d3b5c93ed65a7fdf9057d2750c00876
-
SHA1
0108371c201ed7bd1c79aa7cfb043f4beaac2e2c
-
SHA256
caa9ea63e3ede39a645c277e5c59f2ead021d2f822f587d69d759539246c32f5
-
SHA512
4dcbe46e8e3b22e0b4a38d9091530d6b7cfeb8b34f6c76480c5919c7f2e5db10b0fae34d49f0007872318efec6a86ae56347d53c667d6e5a2376aa12b6941b74
-
SSDEEP
3072:dXyvV+dr0g9QUTUVwp6nurFboky8k/JR+Ty:sdUr0ExT+wpKurA8k/Db
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d3b5c93ed65a7fdf9057d2750c00876_JaffaCakes118
Files
-
3d3b5c93ed65a7fdf9057d2750c00876_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
xlsy Size: - Virtual size: 508KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xlsy Size: 115KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE