Static task
static1
Behavioral task
behavioral1
Sample
3ea36ad20864beb0db14b9dca8011946_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ea36ad20864beb0db14b9dca8011946_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ea36ad20864beb0db14b9dca8011946_JaffaCakes118
-
Size
50KB
-
MD5
3ea36ad20864beb0db14b9dca8011946
-
SHA1
42ee6eb3cb1cb739ce1048f93509f683ce091b76
-
SHA256
33f55a30ccc33fd5a71fb722c65b8b2b3190e56bcfb44565324ab40e540696a4
-
SHA512
d579e5a25bf58b26c2a49b6760313d64af5a682a4d4f31f5f2db3df7e6d9fe083ab13d8389f33d4a01f9ee986786adeab4d1e6e1b02d0d531f9de29d017e185f
-
SSDEEP
1536:c7Okvu+jYr7DsiMC+eDhCOqoW0HMmQfSxyE:c7dzsr7hMK1DqoB8SsE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ea36ad20864beb0db14b9dca8011946_JaffaCakes118
Files
-
3ea36ad20864beb0db14b9dca8011946_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.scpack Size: - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ