Static task
static1
Behavioral task
behavioral1
Sample
3ec52fd659c6394b79cc0bfff4dc03fb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3ec52fd659c6394b79cc0bfff4dc03fb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ec52fd659c6394b79cc0bfff4dc03fb_JaffaCakes118
-
Size
50KB
-
MD5
3ec52fd659c6394b79cc0bfff4dc03fb
-
SHA1
3985bd1319a57f7faa11c5a43510e23df81e7f52
-
SHA256
4da09ed5426098c246ec661e13bed76f1586f7dd46b8dff2284e67b073357eb2
-
SHA512
f9c86c038ec5e0bb681af9090f359e78d76270ca1c9b8052eabcb41b006115eaf2222963094ebbaf673db26aeeb9c0e5d1c8e3928174b501ac4c87535d7aa164
-
SSDEEP
768:w0G5+fnTzfeiif8MxGALR+0T9Delx27nHxiBoR41c6i2pF5bRvQTnlwKrmmJigo:5GAfnTN88KRIyFvWZVlPMm3go
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ec52fd659c6394b79cc0bfff4dc03fb_JaffaCakes118
Files
-
3ec52fd659c6394b79cc0bfff4dc03fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE