Static task
static1
Behavioral task
behavioral1
Sample
3ec56634dacda4b808c1c10356203640_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3ec56634dacda4b808c1c10356203640_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ec56634dacda4b808c1c10356203640_JaffaCakes118
-
Size
196KB
-
MD5
3ec56634dacda4b808c1c10356203640
-
SHA1
97a4dfcc4cf124bd12f4fe1e9d3d65a1cef20fbe
-
SHA256
9e0c8c21a42e235ddbb83ee058d75c4a68faf6c273b12be5bd7fd29342bb8d50
-
SHA512
ccec1754b5ad487f3cc9089d51eea35721cda167bfed3f9e58cb5f277f0a4cb7a267b685759d2b31fe2660a955433c3388b03a9dcf78a69aed5910c022327d5e
-
SSDEEP
3072:7xhnPikw8xPArfaOUw4cPouF5RobrUiTn0D2L0eemmAeznYI3GQ+k9rY1TwA:NhPiQx/qQnUiTnZL0egAKYIeWruT/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ec56634dacda4b808c1c10356203640_JaffaCakes118
Files
-
3ec56634dacda4b808c1c10356203640_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 174KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 619B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ