Static task
static1
Behavioral task
behavioral1
Sample
b3724ac01816afe40f13022059a31bb0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b3724ac01816afe40f13022059a31bb0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3724ac01816afe40f13022059a31bb0_JaffaCakes118
-
Size
1.9MB
-
MD5
b3724ac01816afe40f13022059a31bb0
-
SHA1
fb5fefcbe8b531e2a7ed8680d1d817a42d725f19
-
SHA256
d0dc9ae27267fbea39a386e935227fd46b8034d3750e9759f399f797247a5b59
-
SHA512
31bde5b6a708d9eef94e2a71b709b78288df65cec0c1f10c07ae698ba74ece7e8050c2598c6a200701f0cff69b22b0936002f3b66c86aebb6f0769022b000772
-
SSDEEP
24576:tkWAnnosm5XrUDnn0MMsMtBZW2wCn96FCLhi8oI9jHC+sT/Nyeo8WR/fT8Cj1+2C:JA2MMsqZwxJGg9o58SeXaI310php6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3724ac01816afe40f13022059a31bb0_JaffaCakes118
Files
-
b3724ac01816afe40f13022059a31bb0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 592KB - Virtual size: 591KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ