Static task
static1
Behavioral task
behavioral1
Sample
3de9f757061bdcf9eb5da18e17f66188_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3de9f757061bdcf9eb5da18e17f66188_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3de9f757061bdcf9eb5da18e17f66188_JaffaCakes118
-
Size
328KB
-
MD5
3de9f757061bdcf9eb5da18e17f66188
-
SHA1
6626c59e5ce95f60821aea7115aa4f741c9f3d32
-
SHA256
2e824087e171d53e0d7ccd4714489797fd57a453cc877c998e96ae45e0866330
-
SHA512
d76428be6f680d9794f05cdd80d73443241e9cdab417c9f66d971e4c1f66ac4e926cfa88c07dc5fcafd649cbb760f904446e47d0eaade642a3681d5846702602
-
SSDEEP
6144:tF2idZecnl20lHRxp3gNlk9ihl0/srEQpPK+e1FtEuxF+U2/kFC:XF3Z4mxxuoEtlK+kt9T2MFC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3de9f757061bdcf9eb5da18e17f66188_JaffaCakes118
Files
-
3de9f757061bdcf9eb5da18e17f66188_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 319KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE