Static task
static1
Behavioral task
behavioral1
Sample
3e5f660a082a973503e31b1496e59fd5_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
3e5f660a082a973503e31b1496e59fd5_JaffaCakes118
-
Size
1.7MB
-
MD5
3e5f660a082a973503e31b1496e59fd5
-
SHA1
449557547e64011ffacd3546c5d386b6c99d759a
-
SHA256
a35714704c66baa2baeb612fcc61d0a1b9976725bc2ec62e209c42e557df9912
-
SHA512
f5ffea38672b834c0af83e222797870068dc0d4aad1dab3cfa8c96bda11af6433c0c04a136e566680bc4f4a7ecb7419f8cccbc8bb4550eebaa97eaae155a6973
-
SSDEEP
24576:+BE40zWmvt8VYS175Kd2l1EWkXMNf8mgqz7I1DqNmct0YL1/h+hLlMS:+BE40zWmvt8BHsdW9NrXE1KFZR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e5f660a082a973503e31b1496e59fd5_JaffaCakes118
Files
-
3e5f660a082a973503e31b1496e59fd5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 792KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
piaoyun Size: 808KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE