Static task
static1
Behavioral task
behavioral1
Sample
3e1d004b826130c726d8673d01b7d1cc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e1d004b826130c726d8673d01b7d1cc_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3e1d004b826130c726d8673d01b7d1cc_JaffaCakes118
-
Size
89KB
-
MD5
3e1d004b826130c726d8673d01b7d1cc
-
SHA1
20d80a339090cbcfbfe5cd93eab720d91e45ed3b
-
SHA256
59b456ebf28263bcfa9c991d1bd1b44c4f90a35b3ac45dc785c0f4ed0a2ef58c
-
SHA512
5b1448245011b41bcf644643a74683460e763bab9332f652626454376d053acb0622cc2ae8c6143bdd81fb4e588e9a0f642153c69b9a706bc67d572553fdbed6
-
SSDEEP
1536:QUTC5h6fZd0p4oh241Z8bdauMI0/DjUMkS0:QUTCSb0pr2hB0/DjgL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e1d004b826130c726d8673d01b7d1cc_JaffaCakes118
Files
-
3e1d004b826130c726d8673d01b7d1cc_JaffaCakes118.exe .wsf windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Pav Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE