Static task
static1
Behavioral task
behavioral1
Sample
3e1b7ddf771d4f8eac1f166bd8202e78_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3e1b7ddf771d4f8eac1f166bd8202e78_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e1b7ddf771d4f8eac1f166bd8202e78_JaffaCakes118
-
Size
32KB
-
MD5
3e1b7ddf771d4f8eac1f166bd8202e78
-
SHA1
d2e4af9ca7bd8f20efbafdb32c2737567864e639
-
SHA256
8ee830123db89ddf83bb97c155053b8307cd3b7de16921c0775f4d155c03756a
-
SHA512
0d0bd13d5f9806de9f9b23463ade0145d5e9ec6fd7f477a8f6de9c408bc19a6bf9c427e567a3e25dab9b844c9dc576e0c94828ee2d8dfed456d52bd44ff244fa
-
SSDEEP
768:m1oKzybZcsT9v3li38PwBN/OCl+iQE/kU:m1oIyVFSiwjDl+dZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e1b7ddf771d4f8eac1f166bd8202e78_JaffaCakes118
Files
-
3e1b7ddf771d4f8eac1f166bd8202e78_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xur Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE