Static task
static1
Behavioral task
behavioral1
Sample
3da382f9055a9d53656f350d8523e7e2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3da382f9055a9d53656f350d8523e7e2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3da382f9055a9d53656f350d8523e7e2_JaffaCakes118
-
Size
28KB
-
MD5
3da382f9055a9d53656f350d8523e7e2
-
SHA1
a05f1bdc0780d552abedad3655370182858d4d0a
-
SHA256
01c4365da6e2a564a34024bc5e570f2afc3a6817f957a41412c51ca15ac6c34f
-
SHA512
70c97e80dc3e98cf6d0f845b102ffcfb66db487e1c4de24075c5083beed6ee553340e5e6ed20e2b9789f4c83e5d6d6acd54f21f8977ed16b76f8b4b04c7ca910
-
SSDEEP
768:sSREkpvOFwapr+BXpZnwVsccnWpphM7keQyDlIIIIII4nS:scdRKnd+9nwVonWr7+lIIIIII
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3da382f9055a9d53656f350d8523e7e2_JaffaCakes118
Files
-
3da382f9055a9d53656f350d8523e7e2_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE