Static task
static1
Behavioral task
behavioral1
Sample
3e3cb1effad08c5d2b59e76e0b7ca80e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e3cb1effad08c5d2b59e76e0b7ca80e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e3cb1effad08c5d2b59e76e0b7ca80e_JaffaCakes118
-
Size
30KB
-
MD5
3e3cb1effad08c5d2b59e76e0b7ca80e
-
SHA1
e38a31b2a0a3a5ae036b5040137dff99f4140839
-
SHA256
cf8c343fdcab4d68414b53b86c42b27e31c2bb42f7c88c7b5931258325a624f0
-
SHA512
6a7c5cdf17aedd31f6c157222f30bc1dd50977d7f57f12718bc1dac30585bf2e1ef7c8a814ea478db85b017fb52bfd7d7d1546f17e95b1a9c82f5d3b0bbf4cb7
-
SSDEEP
768:4VTsxfSjwC7On2qcQk7GW6OyOzhUG1nbcuyD7UONd:w2LB2R7yOzqG1nouy8Sd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e3cb1effad08c5d2b59e76e0b7ca80e_JaffaCakes118
Files
-
3e3cb1effad08c5d2b59e76e0b7ca80e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE