Static task
static1
Behavioral task
behavioral1
Sample
3ff863c0a819cebeb103a8f9249f7ea7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3ff863c0a819cebeb103a8f9249f7ea7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ff863c0a819cebeb103a8f9249f7ea7_JaffaCakes118
-
Size
63KB
-
MD5
3ff863c0a819cebeb103a8f9249f7ea7
-
SHA1
dd4bcdb38378887aa248b3cf6f1f5143288dc3c3
-
SHA256
8246b775ddb0b827d1e58d6408fe0074252cec9e464d41fa3401f8ee11fcdd24
-
SHA512
12b3e451a70303145f65ab9f2a7de958c8fb476ab68a2b8ddbf03f2fa36d4981533c36f6efe12c44c01b7822051e5fc35696b6cfc6c00586dea6839299f17d78
-
SSDEEP
768:L24DmnpfFEUXzCau7DWJ55p1Uptr9O5kbzpk7DEL2v1q6H4:L24IG0zCau7DWdUpt85kbF2DRv1qO4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ff863c0a819cebeb103a8f9249f7ea7_JaffaCakes118
Files
-
3ff863c0a819cebeb103a8f9249f7ea7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.+% Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE