Static task
static1
Behavioral task
behavioral1
Sample
3c239f40381927e44ee2cb4d50f54c1d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3c239f40381927e44ee2cb4d50f54c1d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3c239f40381927e44ee2cb4d50f54c1d_JaffaCakes118
-
Size
16KB
-
MD5
3c239f40381927e44ee2cb4d50f54c1d
-
SHA1
b62828862d56d4f3e3512bc453945d9c532878be
-
SHA256
618a72e22ec168a2a18d3a9397960a0f69616ab51ada30f4446ad071aff174e6
-
SHA512
01620959c6a67ca1dab2b808f49ab28c67c35926984a6f4ac76757c67b267b4f2fd361792743fc555d21d2e4a1509c08b70f40be769f9d06e9c023380d33481d
-
SSDEEP
192:FXV7BjwMI2Yokns3IThu4JYWG/tsjP25YMWBUAsNo7f5LhTrR+9sb2MFe53oSWHn:Fl7ZwAjH4y7tcPJBUAsNgf5FTF24B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c239f40381927e44ee2cb4d50f54c1d_JaffaCakes118
Files
-
3c239f40381927e44ee2cb4d50f54c1d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 659KB - Virtual size: 658KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ