Static task
static1
Behavioral task
behavioral1
Sample
3eb833c09bbdfdf6c0b070f20aa999e2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3eb833c09bbdfdf6c0b070f20aa999e2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3eb833c09bbdfdf6c0b070f20aa999e2_JaffaCakes118
-
Size
24KB
-
MD5
3eb833c09bbdfdf6c0b070f20aa999e2
-
SHA1
c7ae39de574f5a00397557d3c7e78e6810c9a815
-
SHA256
7603a9e667aa9760f32184b3efc086ea0885477ec9e0cbe87b94653715402d95
-
SHA512
da73368d1973cc0d26551a2c5547bd5bfdba9af117a1a92bf53f3e37f4a3d524528080752de3b3b41928b20838394b13681c30daf8cabe0e7296648f182c6a60
-
SSDEEP
384:3OEHr+IK4HWAOQcWZmWM3xil8gHRYauYCI+xfpY9uH5GTQvjNNtL6r:zHr+wjcFX83HRYauq+xfDGr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3eb833c09bbdfdf6c0b070f20aa999e2_JaffaCakes118
Files
-
3eb833c09bbdfdf6c0b070f20aa999e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE