Static task
static1
Behavioral task
behavioral1
Sample
3ec5f49789b4d5862848dab90d8a330c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ec5f49789b4d5862848dab90d8a330c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ec5f49789b4d5862848dab90d8a330c_JaffaCakes118
-
Size
6.7MB
-
MD5
3ec5f49789b4d5862848dab90d8a330c
-
SHA1
3868bae64ca19e9e952df9b00efda7906ec30eca
-
SHA256
fd73004f1a8fa88065a90e28fb46b3e209c5d7801980609df30e86ef096f9397
-
SHA512
a9bd5596e890ab1fdf68bec94c3ea457a62cdd1abd9ca1b58488b34ff9d722b80ff4e9a1047d0518625961f1a8e73811b4da8128a18cbce21c2557686c1afb09
-
SSDEEP
98304:+F15ioV0+3HtX0LpK4VI6iFdQO03Avi+iOLeuvanKdLul0Jnnn7HN895QqLyAcU0:S5iQ0mlqpy8ONKvRnKdLu0n7HNWr1IhJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ec5f49789b4d5862848dab90d8a330c_JaffaCakes118
Files
-
3ec5f49789b4d5862848dab90d8a330c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ