Static task
static1
Behavioral task
behavioral1
Sample
3e47118352656dda16311fb5f70dd7d6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e47118352656dda16311fb5f70dd7d6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e47118352656dda16311fb5f70dd7d6_JaffaCakes118
-
Size
33KB
-
MD5
3e47118352656dda16311fb5f70dd7d6
-
SHA1
2703b364731b0a0fd3fb9be387e0eeddd22d4934
-
SHA256
13cee46fdb9c8e9d2273e16356a2fa94090878e3d549ae8efe1a25b0d3cc62c9
-
SHA512
5db4c7fafefe8c4e0cd9923405bc5c68b41722ff8f3922134ebd9e2030fbff868c09005bf3f9466540924446284611a447e0632a6afc31811f48119c81a2ce33
-
SSDEEP
768:/11i9BxrPUfltMlCsSDo8RNUwMw8bFMkcXm2tw0EwK8d6K6kMI4m:sPrPUd0CsSDo8RNUvw8xB0ET856kMI5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e47118352656dda16311fb5f70dd7d6_JaffaCakes118
Files
-
3e47118352656dda16311fb5f70dd7d6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ