Static task
static1
Behavioral task
behavioral1
Sample
3e95595e8d848e38ccedba1e56998239_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
3e95595e8d848e38ccedba1e56998239_JaffaCakes118
-
Size
128KB
-
MD5
3e95595e8d848e38ccedba1e56998239
-
SHA1
401b92aad984ec28f688c85cd27467b66daf0f2c
-
SHA256
f5082111c243791a6d7916af16c0d1ece075c91e84441a88e506fb1fe8311712
-
SHA512
03488167cb91250ba011c5fb6ea4cde1edb65880f0cfc448cf5eb7a10bcd97553491d420b2637dcc5a681427f2c2fdb7c79c42919d95192358fc959712fad8e2
-
SSDEEP
3072:uGHi6mwTZeZWsHDXVjMveyYshh5v28zdfBeSg:+oZPsHDXV1shf28ztr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e95595e8d848e38ccedba1e56998239_JaffaCakes118
Files
-
3e95595e8d848e38ccedba1e56998239_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE