Static task
static1
Behavioral task
behavioral1
Sample
3691b19ec9e97de8a76eb6488e81ccb4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3691b19ec9e97de8a76eb6488e81ccb4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3691b19ec9e97de8a76eb6488e81ccb4_JaffaCakes118
-
Size
42KB
-
MD5
3691b19ec9e97de8a76eb6488e81ccb4
-
SHA1
4419a54823c70eeb9773dc26fe7b17691ef341ae
-
SHA256
7d4bd2dba147a01392a85fce22dc6b05ee37c970aeecbd28f6ac456db7cb9faf
-
SHA512
1f69a06ef308e46c300095e28719640dbeda3a17893d2093bbd33462029518628f5fd4e110347b0bb7934984570296a29ea71ef23f51427b565de6e72d0570c4
-
SSDEEP
768:xV7Lj4y+pL13IMtZmAO4PREgkxHpq4NULPGNMPwxJtrpbfFAtT6PeVm9ZP+r2F:xVL4rBBKsJBk9px3rVrNyvg9ZPce
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3691b19ec9e97de8a76eb6488e81ccb4_JaffaCakes118
Files
-
3691b19ec9e97de8a76eb6488e81ccb4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 659KB - Virtual size: 658KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ