Static task
static1
Behavioral task
behavioral1
Sample
3c70160685ead4f7d6aabc8bbb2acc06_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c70160685ead4f7d6aabc8bbb2acc06_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3c70160685ead4f7d6aabc8bbb2acc06_JaffaCakes118
-
Size
79KB
-
MD5
3c70160685ead4f7d6aabc8bbb2acc06
-
SHA1
9685d7f758b275398c89368eb2094307c82a52f0
-
SHA256
a60ff2fbf851c6329f74e4e38860808c83c22c4dd8e8d19e421d61116474d032
-
SHA512
754f273bb0c8716c09f657c00a1c1655e3012df2afaeb36952024b2d4ae79e7ddeb4186eac6b32457071c859e93d55e181a671f96efaa034972e68d508e836e6
-
SSDEEP
1536:fkbJD4xNFbme3HpHeerzkpMjN5X+/ZzMpUwn:8SNFbH3HMerzkYNV+Wzn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c70160685ead4f7d6aabc8bbb2acc06_JaffaCakes118
Files
-
3c70160685ead4f7d6aabc8bbb2acc06_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.peco Size: 762KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.peco Size: 100KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.peco Size: 79KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.peco Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.peco Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE