Static task
static1
Behavioral task
behavioral1
Sample
3ec36b12b327439f5ccd5b1e27b2e75e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ec36b12b327439f5ccd5b1e27b2e75e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ec36b12b327439f5ccd5b1e27b2e75e_JaffaCakes118
-
Size
105KB
-
MD5
3ec36b12b327439f5ccd5b1e27b2e75e
-
SHA1
1de0f71867475b9411b9acfba0338af0f139f5d3
-
SHA256
f95b711f4daded3f3638c9518ca04a016f011a78f6b7ddd1dd32b61b903c07e1
-
SHA512
9bef4b259fa56eeca9eb1caac85008e555f0c1fb955c469e4efa28448da0c04d2e75b953d8722b75ce3a7087bebfcb4ce473024c1deadaf98d7585974ee24ddb
-
SSDEEP
1536:RnrN91p3XPoPUM+8dt/O1fJt+X6r/5kojeZxKmiA0UV09YycL0pp1SAFXU9upw7s:Z1p3f8T/ZOfIX67u5fD04ycLgpysGS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ec36b12b327439f5ccd5b1e27b2e75e_JaffaCakes118
Files
-
3ec36b12b327439f5ccd5b1e27b2e75e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE