Static task
static1
Behavioral task
behavioral1
Sample
b3c67f37432ff16c2123317cbfa4d14b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b3c67f37432ff16c2123317cbfa4d14b_JaffaCakes118
-
Size
139KB
-
MD5
b3c67f37432ff16c2123317cbfa4d14b
-
SHA1
6964a631b2496fbd02bc366199535372444e2d39
-
SHA256
a40e67ca9480351b0aa32438ba1bd60aa97fc1d96339ec65ff5b4b12765f1860
-
SHA512
c99e33211da06aeca2d6b969d0612b65117a0bd49b5ece08082bf6b6d724f879a1b1c606ce0b191cee324f4687da6b870786af995491866f4ccdf26f0d5d504b
-
SSDEEP
3072:tdlhA6/CEZuHJ6KCRKrH8JXdu6JGpnmQ5HiX3433+ynV5:tdlG0vZ2J6K38hdu6oiIuyn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3c67f37432ff16c2123317cbfa4d14b_JaffaCakes118
Files
-
b3c67f37432ff16c2123317cbfa4d14b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
dsm Size: 3KB - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wh4yl Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
q Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE