Static task
static1
Behavioral task
behavioral1
Sample
3ec4d9f9da2a129a0e5a9f37b9586679_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ec4d9f9da2a129a0e5a9f37b9586679_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3ec4d9f9da2a129a0e5a9f37b9586679_JaffaCakes118
-
Size
122KB
-
MD5
3ec4d9f9da2a129a0e5a9f37b9586679
-
SHA1
6b18333501c4ba41adcf4d59263d4c499da27bd8
-
SHA256
a0972233c0b83d472b8cb7912bac5c63070a4b211273f46e79575849564386ab
-
SHA512
c65da582bea900536ee80c01010b76f1d24b18b8a7992e44df24e0f6ee2ab2e31af353aac467f7282b20244759b085dd0f158df8e09957863189eb3b6f1575ac
-
SSDEEP
3072:op8GES+YF6RL9XLozR/L6HxP2neEMRjtZsuar+PF9hBZaT:opkS+M6RL9LozR/+ApKjw1+Ju
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ec4d9f9da2a129a0e5a9f37b9586679_JaffaCakes118
Files
-
3ec4d9f9da2a129a0e5a9f37b9586679_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE