Static task
static1
Behavioral task
behavioral1
Sample
3fa1c6e094b5b940ce74d7b3ec8c1ceb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3fa1c6e094b5b940ce74d7b3ec8c1ceb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3fa1c6e094b5b940ce74d7b3ec8c1ceb_JaffaCakes118
-
Size
17.3MB
-
MD5
3fa1c6e094b5b940ce74d7b3ec8c1ceb
-
SHA1
c1f4b28da4d2a8161e631489619e423b923fd01f
-
SHA256
8f5d835472fb7e4226c314f94a0972e46f7640e490291eca6a7664d7840e63ec
-
SHA512
5e189fc76d5b2dc6e0a0354ffbd3299b7e66d1c566bd563bb070fe67785ff24b5142e1ec0ab9832db5e1b1b667276681131076585f722fc8d60c8d10b3f1cb33
-
SSDEEP
393216:F9TAAUQShFJGyEBI39NvLf7lLJlB5As6tfmKGFjFqbZ:PAAUQOES95flJlBURmKGFjmZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fa1c6e094b5b940ce74d7b3ec8c1ceb_JaffaCakes118
Files
-
3fa1c6e094b5b940ce74d7b3ec8c1ceb_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
fWnS"< Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 17.2MB - Virtual size: 17.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ