Static task
static1
Behavioral task
behavioral1
Sample
3f6db3aafdf5f7c53f652bc5028f52ef_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f6db3aafdf5f7c53f652bc5028f52ef_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f6db3aafdf5f7c53f652bc5028f52ef_JaffaCakes118
-
Size
53KB
-
MD5
3f6db3aafdf5f7c53f652bc5028f52ef
-
SHA1
15ba5f85613c2730da204e7d9f9c1a5f1d15e289
-
SHA256
c219b4fcc88e685391dd74a57fb4953b9f2f4cd93631c7555029245b9ea8b5c0
-
SHA512
695971606e33e86eece38f2f4107281abb547d347a89cda3af746ae0eca38b081b665571b2c8945019c311c571555d36291ebd6dc0d886d4692faf210054d386
-
SSDEEP
768:bsUl4G19OkWF4vheouCR6VUA5nPsGqe9UeJE/yYefP0/u8rbyKBeb:XOkWB5sngUFJmP6blcb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f6db3aafdf5f7c53f652bc5028f52ef_JaffaCakes118
Files
-
3f6db3aafdf5f7c53f652bc5028f52ef_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 196KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ