Static task
static1
Behavioral task
behavioral1
Sample
3da7e6bde1743f39718e08956c12f95c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3da7e6bde1743f39718e08956c12f95c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3da7e6bde1743f39718e08956c12f95c_JaffaCakes118
-
Size
8KB
-
MD5
3da7e6bde1743f39718e08956c12f95c
-
SHA1
130c79568c9c97fef087a08365bcf113fbac4045
-
SHA256
d5e62d1db8dfe82f1b50ac9357e1002c4414f44e82d16444dee1223ae94b8c98
-
SHA512
1c4fdaf8058154d914489c7ec861da07d4a5b65e28e29357fc81bd8e970c2ab494140b9b73dcdd8a323dcf1d9601dd79dd2064ccd167fef1f5ed8a5c529c3f7c
-
SSDEEP
192:DZh6YaAfYC7IvyRFs7r+dCYDlaQzWmHLp2n9MIi:Dmwg8cEhdTDgqTHyj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3da7e6bde1743f39718e08956c12f95c_JaffaCakes118
Files
-
3da7e6bde1743f39718e08956c12f95c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
fJMq Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fJMq Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE