Static task
static1
Behavioral task
behavioral1
Sample
3d8bce8235c2f4e5fafeb27abf4a4765_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d8bce8235c2f4e5fafeb27abf4a4765_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d8bce8235c2f4e5fafeb27abf4a4765_JaffaCakes118
-
Size
203KB
-
MD5
3d8bce8235c2f4e5fafeb27abf4a4765
-
SHA1
6863d45fb5a96229eaaae51710e755ae4377b063
-
SHA256
20474b52577a6c32a1e2086eec5776aafd54172e1fe1754319a0e2dee1f8c870
-
SHA512
3b15d4fbce2f3f30c8d0df44c69bd073ede48fe54cd00db3e05b848c6db1e6fad9e32afc16bce421f2dae04188561d9cbeb697eb762eb6597ece0fe2fd727fa2
-
SSDEEP
6144:s1KJyOOkbQuPGGTHaXu7iHB8LaE6uD+BZ3:szxkbnGGTo4iWAd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d8bce8235c2f4e5fafeb27abf4a4765_JaffaCakes118
Files
-
3d8bce8235c2f4e5fafeb27abf4a4765_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 196KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 50B - Virtual size: 50B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CDLock Size: 50B - Virtual size: 50B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ