Static task
static1
Behavioral task
behavioral1
Sample
3c6b05bd8dbb6cace087a010999ba431_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3c6b05bd8dbb6cace087a010999ba431_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3c6b05bd8dbb6cace087a010999ba431_JaffaCakes118
-
Size
266KB
-
MD5
3c6b05bd8dbb6cace087a010999ba431
-
SHA1
3ae70b457483dfcb2637131fd374ff8634671b7c
-
SHA256
db5c1dfc699dc220bc068819976e5271139632c16e8ca3237d6dd1f11d6c041f
-
SHA512
2bcdb3a70dd6fd0b9e23b3680514ce702682f735fb4630145aa6e2671c9d25c7f8cec36b221292c9e5d95d750a2e4474844c39d1b84a01d7a29d33c0a1f8e0d3
-
SSDEEP
6144:5QFELJ/KcN78+R/AWTJ0bVI3HxheC5ibJ80Y8aooopIb+Im:OKJZN788/Am59itzY8NoopI1m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c6b05bd8dbb6cace087a010999ba431_JaffaCakes118
Files
-
3c6b05bd8dbb6cace087a010999ba431_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 94KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 17KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 137KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE