Static task
static1
Behavioral task
behavioral1
Sample
b3c3d87f565edd6815637f6d9b8123f9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3c3d87f565edd6815637f6d9b8123f9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3c3d87f565edd6815637f6d9b8123f9_JaffaCakes118
-
Size
41KB
-
MD5
b3c3d87f565edd6815637f6d9b8123f9
-
SHA1
815b8b17922a58c08bea63acb8a543d29c70e829
-
SHA256
28361d96e20ba5df9ef4616d5cc30be8a1ad2b9b83faff75bdb8f7b9bb90c6f5
-
SHA512
8b0b19d157845e4544d2c0c4c2515d25e86366918f2d162ebf3e315c8437832568f343f821d8aed33b7fa2a9d982e22c71ee713ad475211cca51f78993fbcb52
-
SSDEEP
768:EBHiqWoQvwNo/+0m+D0IyXC8J9NKsCs5zuCqQlddbml+e4Ct7u1jb8x:ECqWoQl/fFAVy4bmtu1jIx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3c3d87f565edd6815637f6d9b8123f9_JaffaCakes118
Files
-
b3c3d87f565edd6815637f6d9b8123f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ