Static task
static1
Behavioral task
behavioral1
Sample
3c9a30ae004a034ee68c70206877f891_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3c9a30ae004a034ee68c70206877f891_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3c9a30ae004a034ee68c70206877f891_JaffaCakes118
-
Size
3KB
-
MD5
3c9a30ae004a034ee68c70206877f891
-
SHA1
5ed1e07c0be4375c1d3c09169ae654cb47f0e903
-
SHA256
65304e7916c69d9cc10b522253236aefd5bca57085aaa2115c2a457f6952fd0a
-
SHA512
8b0f7316d5214d9a1f2b1d4dc7f0dd40a0e3d3b8d69f145207859cdc89b30ff6dfb8ba18a2b1fe1533ce60e43bb185c089dff36eced4c83a8579c08717aaa179
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c9a30ae004a034ee68c70206877f891_JaffaCakes118
Files
-
3c9a30ae004a034ee68c70206877f891_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.shrink Size: 49KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shrink Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shrink Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shrink Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE