Static task
static1
Behavioral task
behavioral1
Sample
3e9e0c5e39c44cc6a3f2576b4982b784_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3e9e0c5e39c44cc6a3f2576b4982b784_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e9e0c5e39c44cc6a3f2576b4982b784_JaffaCakes118
-
Size
146KB
-
MD5
3e9e0c5e39c44cc6a3f2576b4982b784
-
SHA1
ecba8a98ee8a4cfd2f07b94eae0a2771abccda12
-
SHA256
a8c46edfbe520761afc3c256cf80ac53f98a9cbec5bbb8b1ae8cec3a8bdfa8de
-
SHA512
888f267e369499ac6211fcbaaf2f7174deaceeccb4cccb121327a23a777e7f9394326e89a0765bcd4170a3c5e443d5b4aa7705999f8af592f49520017cfc8f3c
-
SSDEEP
3072:TikPgJ7u6vAfM6zLjqcfgxHHbzkDGe+C6ZhT5amhA/GwR5pkKGM:TikPW75AfM6zLvf8Hbo6Z94mnwz2M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e9e0c5e39c44cc6a3f2576b4982b784_JaffaCakes118
Files
-
3e9e0c5e39c44cc6a3f2576b4982b784_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 188KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ