Static task
static1
Behavioral task
behavioral1
Sample
3da587ab84b2726f01643400f16b0b32_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3da587ab84b2726f01643400f16b0b32_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3da587ab84b2726f01643400f16b0b32_JaffaCakes118
-
Size
216KB
-
MD5
3da587ab84b2726f01643400f16b0b32
-
SHA1
beaa55e0395cff03c2e40f0433a450186dd39ef2
-
SHA256
0921c9a14b316b4588545236daf9351503eea865016949b976a5f8db34cdd0fd
-
SHA512
d6b4b1e23596c7b4e957970d9e72320f9146916d407edb85864634c62e49256e695474ea861231be60681c8350da171c0f36b4fabe0cf9ce976981728055ce2a
-
SSDEEP
3072:kh8yJgwTnKQQa52qrXkZvc9YuDorbKfYl0j15hKrqXJi0jy1MRO++p49h28VECgc:kkyKu2EWvVELfYl01aGXJmK/f2cwc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3da587ab84b2726f01643400f16b0b32_JaffaCakes118
Files
-
3da587ab84b2726f01643400f16b0b32_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 277KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ