Static task
static1
Behavioral task
behavioral1
Sample
3dc8a0646b34ebd23f5b08d35cdbe6a9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3dc8a0646b34ebd23f5b08d35cdbe6a9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3dc8a0646b34ebd23f5b08d35cdbe6a9_JaffaCakes118
-
Size
20KB
-
MD5
3dc8a0646b34ebd23f5b08d35cdbe6a9
-
SHA1
67edf5ad5af742df0b3af265006fbe7c56d6fcbe
-
SHA256
4dd3ffbf538f44bcf95ec486b770bae1d18ecf2fcdff758eac0f421ee2930ea3
-
SHA512
d0f754d024f7e8bade804357da9330b4ea0ce81f8632538e0468491f1c5af49629d2b524fe0764cfc072c64b1828e88ca0e4fd018cad67a177fa67b3bfbbd15e
-
SSDEEP
384:67JxkUm8gln/ifaOBJpwfLOSyjQO9n87vrRgEvbk:kJxkU8n6fJCfqSpO2Fgek
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dc8a0646b34ebd23f5b08d35cdbe6a9_JaffaCakes118
Files
-
3dc8a0646b34ebd23f5b08d35cdbe6a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 293B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ