Static task
static1
Behavioral task
behavioral1
Sample
3ebd5a5aa8b054e4ca4591562563bc0a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3ebd5a5aa8b054e4ca4591562563bc0a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ebd5a5aa8b054e4ca4591562563bc0a_JaffaCakes118
-
Size
17KB
-
MD5
3ebd5a5aa8b054e4ca4591562563bc0a
-
SHA1
ae0fbaf48eaf16b95c8227d075cbdb7cd4e402f3
-
SHA256
2bb76ca11fb85fb4bd2ef1d31bb066df4c74c27315b3673993d2e60ee1900ade
-
SHA512
8dc810c7217216bad0a4fdcda726ee7cd788c3e60b8e867bb6f18f0223eb5be038cf62d0297771f85bb4027eee75f3620d24a4e26f0220692ccb2b04738b2acd
-
SSDEEP
384:wcHtUN8kx82onfs3aW39FmNB/QMxRJ+rQY6jIINx+pajLxepfBz6bGIC4YjeT:lZo4UqWtS9xqsY6jdyyxwJfn42o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ebd5a5aa8b054e4ca4591562563bc0a_JaffaCakes118
Files
-
3ebd5a5aa8b054e4ca4591562563bc0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
d6j8ty0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
d6j8ty1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
d6j8ty2 Size: 283B - Virtual size: 815B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE