Static task
static1
Behavioral task
behavioral1
Sample
a3efbcd42f272d08f1aa70357db456ed_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a3efbcd42f272d08f1aa70357db456ed_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3efbcd42f272d08f1aa70357db456ed_JaffaCakes118
-
Size
468KB
-
MD5
a3efbcd42f272d08f1aa70357db456ed
-
SHA1
bafa1c356454a86bbc3454855817e64c6b478a52
-
SHA256
b17398496ed476102e95c1ae0e9bb9e26354394ded3d908d4b716e52353f4e89
-
SHA512
3c182f913c2d8e0bb7e386c0f11ebe87e41844b2d94aed6b4bc4b3a02eeb859ec2734c41e5f05225d6c03036b82b8057ec9cc3bb33118b1263d69fce0359d11c
-
SSDEEP
6144:01w3lxeDxYaXnNhDbLLyDWJkjwL1tp+NJOeXoMnqxblq7qMfEneglntw:0G3+DJbDbgQL13ev+E7qMfEne
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3efbcd42f272d08f1aa70357db456ed_JaffaCakes118
Files
-
a3efbcd42f272d08f1aa70357db456ed_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 381KB - Virtual size: 381KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE