Static task
static1
Behavioral task
behavioral1
Sample
3df5099d4b88b6b4acf62648f01d0b17_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3df5099d4b88b6b4acf62648f01d0b17_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3df5099d4b88b6b4acf62648f01d0b17_JaffaCakes118
-
Size
271KB
-
MD5
3df5099d4b88b6b4acf62648f01d0b17
-
SHA1
e1d018e27eb7306f140a0dc20ac8eb8b519adf48
-
SHA256
b3eedaa2d97feaa8d7f8d7e8802c147735c6e7aac5238c7c7210f8bcf10d4133
-
SHA512
973c00f29f2625c5965ddc92a15475689cfada3a5f4f7553ca70956f7472d1a18162d618cf1f6ac978bb6a25a70916fad6ecd084a63605487248b5f0e638eb57
-
SSDEEP
6144:G+vBYzLNwKDQPhWwGqB6cl3TTZ+ZQr2N06uFR5TbkVsy88zPDjbRrtLOFbS:RvGzLaKbwGaTTZ+qr2O6uFzkVfprtL8+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3df5099d4b88b6b4acf62648f01d0b17_JaffaCakes118
Files
-
3df5099d4b88b6b4acf62648f01d0b17_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 270KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE