Static task
static1
Behavioral task
behavioral1
Sample
3d85f11e5c443d350488fddf63d3a07f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d85f11e5c443d350488fddf63d3a07f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d85f11e5c443d350488fddf63d3a07f_JaffaCakes118
-
Size
44KB
-
MD5
3d85f11e5c443d350488fddf63d3a07f
-
SHA1
f1cc95310a3a390be00da2d8e9e40280cbe16a88
-
SHA256
986f63fa6bc71d6dde5c061b21c958e948dffe594f336a35faa6f21142409c54
-
SHA512
9ebf47a90416c81a6b2e4244164b3406a603c2509f941e87fbf35ffc4ed47881c3289dc3a1abede9959e6cb4dd664d4d82b3ccb534c4853267eb5b9dfcdbd7c3
-
SSDEEP
768:bNgkqOe1wsZ9ZjX3sV28dDF8JNOF3qBayS8+UVq/p4WfGhAk5Aix+yhIxzZ8G:bqL/HXc8m4+3di+UVq/p3u/5AehIxzb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d85f11e5c443d350488fddf63d3a07f_JaffaCakes118
Files
-
3d85f11e5c443d350488fddf63d3a07f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE