Static task
static1
Behavioral task
behavioral1
Sample
3f69dbe1ea5f97ef2b036fbae89f1c9b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3f69dbe1ea5f97ef2b036fbae89f1c9b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f69dbe1ea5f97ef2b036fbae89f1c9b_JaffaCakes118
-
Size
136KB
-
MD5
3f69dbe1ea5f97ef2b036fbae89f1c9b
-
SHA1
2b142cf756813842ba2cdd1d252e5173dce189b1
-
SHA256
f0da6e14001eb8ac72485946d9d31fbdd24401c4a29f896ac0b10a007a827179
-
SHA512
94d5c36544549c2a79fc710bad3cf06795594a9945b5890e6ef9a16850f0e0bf9c932d4150749cddd8d9e7523b375005fcfc94adbcd39af21284f88afa51235e
-
SSDEEP
3072:5qD6MvuefT3ELLQOZv3jAC7imrYZRahvI2kSey0:5qWMvJ3ELPhjAC7i5ZWIkP0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f69dbe1ea5f97ef2b036fbae89f1c9b_JaffaCakes118
Files
-
3f69dbe1ea5f97ef2b036fbae89f1c9b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 130KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE