Static task
static1
Behavioral task
behavioral1
Sample
3e75fc444d44ac9a3140791fb77daf98_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e75fc444d44ac9a3140791fb77daf98_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e75fc444d44ac9a3140791fb77daf98_JaffaCakes118
-
Size
424KB
-
MD5
3e75fc444d44ac9a3140791fb77daf98
-
SHA1
adbfe1bda6be0ca3559911542e3716cf6ab3c407
-
SHA256
f7b2aea855038fad25130b5c7b2a181a6c40df2cc7d005249bc641d324bd4585
-
SHA512
56e75da5b20671c88f597d79dbd4e4c10a575c04b2c0bc8b9506d93ce6f7a192ef62e550a20a528f3748c8128c8986d25f767f7b1f80333a4cdd2df60a074cda
-
SSDEEP
6144:dZFi1fUKCX05QhYf3xIIT/hcl5AyLtNpaJxvLV+bLX02m+YZ2SPUGZeBgIuMTi4:Zi1fUMWhYavLrUJxvpILXYxZBPUmN4i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e75fc444d44ac9a3140791fb77daf98_JaffaCakes118
Files
-
3e75fc444d44ac9a3140791fb77daf98_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 360KB - Virtual size: 359KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ