Static task
static1
Behavioral task
behavioral1
Sample
3110063a4d08b9c8f873fc641dd9fd8d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3110063a4d08b9c8f873fc641dd9fd8d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3110063a4d08b9c8f873fc641dd9fd8d_JaffaCakes118
-
Size
65KB
-
MD5
3110063a4d08b9c8f873fc641dd9fd8d
-
SHA1
b75ed6a779b8ff34bc00030c886ec01e4081f27c
-
SHA256
cef4173afc01d70c99818a3a6099a1ebe939ee5b39a3c92b149a659b300e23b4
-
SHA512
d060e4859c96046e92cbd472d8572d788d222a4b9934f4cc052f658aa936aef4607abff4903014b088df785be1759dbabe172cfb8bf0aade509298865da0eebc
-
SSDEEP
1536:o4rlcp+YIfbhkuGP5bM6gqC7KnBwvtpcyDxFtwk:o4YI1kuGPcx7sBCoyDzik
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3110063a4d08b9c8f873fc641dd9fd8d_JaffaCakes118
Files
-
3110063a4d08b9c8f873fc641dd9fd8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE