Static task
static1
Behavioral task
behavioral1
Sample
3c908b0e84801a4dce7aae37e63c1b77_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3c908b0e84801a4dce7aae37e63c1b77_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3c908b0e84801a4dce7aae37e63c1b77_JaffaCakes118
-
Size
307KB
-
MD5
3c908b0e84801a4dce7aae37e63c1b77
-
SHA1
81e76692d4b6588b4db56fd7930997ac9a793c0c
-
SHA256
ea3adae514d4857359ff6c9f64ec03f85bb6b481b6ae93bba590d5eb66346c5c
-
SHA512
2b1b6e5571a4a7d295e0258e9749e608c7a1f42175c4c1a8698c8260b1efa84803bed8f916eadf77715cbf11f0879102ea7574d7c7e3fdc7589bf82cdfdb827f
-
SSDEEP
6144:QJJrjnjnJ36VVLYIUgg31DV1MsTurgWZq8Ynmh9gOkhk:oHnzN6TLYL1DV1NT2gSfg3hk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c908b0e84801a4dce7aae37e63c1b77_JaffaCakes118
Files
-
3c908b0e84801a4dce7aae37e63c1b77_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 289KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE