Static task
static1
Behavioral task
behavioral1
Sample
a3dc72d6fdea77ee6e076093a4c9594c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a3dc72d6fdea77ee6e076093a4c9594c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3dc72d6fdea77ee6e076093a4c9594c_JaffaCakes118
-
Size
5.0MB
-
MD5
a3dc72d6fdea77ee6e076093a4c9594c
-
SHA1
92c39b8f5e2041522a0de8ab2cab94fa8aedf344
-
SHA256
712863205625efa6d00d6169550011d2bd3f4deaeaf9b5bba78ff15e9910775d
-
SHA512
657a59ee979becfd5ca3d4a3615283d206e0a75ff106580335d09e03f16d2f757b33249fc6d1f1733d48e08f93221951bbfb90f326a627e348c41231558e9fcb
-
SSDEEP
24576:j6q/ihem84/AbOwqVdOvElDUG+t5fvkvgn5m/nBpA+C/EX7r1ERmsnmQvTxJAa:+A74/dtc8dq3nQgnYnwjYr1EvnmQFea
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3dc72d6fdea77ee6e076093a4c9594c_JaffaCakes118
Files
-
a3dc72d6fdea77ee6e076093a4c9594c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ