Static task
static1
Behavioral task
behavioral1
Sample
3d8032e700d0a489c3508c8417676019_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d8032e700d0a489c3508c8417676019_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d8032e700d0a489c3508c8417676019_JaffaCakes118
-
Size
80KB
-
MD5
3d8032e700d0a489c3508c8417676019
-
SHA1
238623696efc37ac9aca62bcb129c355472b7860
-
SHA256
b75dceb4afeacf1d4e50f8c7386a8768f3acc4a227516f5e7f553f0c6f965d96
-
SHA512
a2d538e8d2055cdd204962b01d87c002b445bb71028ee7b99742442a9645e2674614f42ab2df459a9e04705c36db6bca1e721b46ab4a2596a8226abe8e633e13
-
SSDEEP
768:kM7ZPYcRck0ZzXeshb7a+k1nAL1808u41VQrH6+5:kKZw8T01XeQ2DA+E+Qr6+5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d8032e700d0a489c3508c8417676019_JaffaCakes118
Files
-
3d8032e700d0a489c3508c8417676019_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE