Static task
static1
Behavioral task
behavioral1
Sample
3e2b2d15e40760ff03b411d05b38ed5f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e2b2d15e40760ff03b411d05b38ed5f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e2b2d15e40760ff03b411d05b38ed5f_JaffaCakes118
-
Size
331KB
-
MD5
3e2b2d15e40760ff03b411d05b38ed5f
-
SHA1
f3e27ad9191190463eb1dd91521244490d144cda
-
SHA256
73f8dfef517953bad13e19a76bdc7b9d7491898c0f670bfd81f41c7a16af2ecc
-
SHA512
55708cfdb3de8391e0c7166d81a1e697e690b77f91e705352a0cb81b3d3adfa5dfb4ecfc592d1d4bcc9205c1643190833a0198373d62fa06c006de7b25f1068e
-
SSDEEP
6144:H8BSwI+3x1AdK/4pF2PmcZ3oqfVk+5mCPIVWCHtQb:fx0wK/6qZ3ooVkN4IV3O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e2b2d15e40760ff03b411d05b38ed5f_JaffaCakes118
Files
-
3e2b2d15e40760ff03b411d05b38ed5f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text� Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.d�ta Size: 15KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE