Static task
static1
Behavioral task
behavioral1
Sample
3c3a2b5d39eb550e79c09e980e4ba60d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3c3a2b5d39eb550e79c09e980e4ba60d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3c3a2b5d39eb550e79c09e980e4ba60d_JaffaCakes118
-
Size
214KB
-
MD5
3c3a2b5d39eb550e79c09e980e4ba60d
-
SHA1
7666864c884a21f305716713024cb6e56a690a26
-
SHA256
dcfcd576963fd3cf0dd7635c0e5bb5c427a4d742b0013de51bc17027eab8de4c
-
SHA512
fc5eaf63e852c32211b2ee1e6776cf07c75acbfdf058a8d7687197f3665fdff32c3ffc5b3d34616cca4d8352e96c375e70d7a6d61126d738cc6e5d5af0b7cf27
-
SSDEEP
6144:m+EvW6xQ7I9C79BKe9MBQQS+VCKcTDEPF:NEvj7C79BR2yQsKcTg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c3a2b5d39eb550e79c09e980e4ba60d_JaffaCakes118
Files
-
3c3a2b5d39eb550e79c09e980e4ba60d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE