Static task
static1
Behavioral task
behavioral1
Sample
3926bb48ffd6ba2c957b9fa27acbfc0a_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3926bb48ffd6ba2c957b9fa27acbfc0a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3926bb48ffd6ba2c957b9fa27acbfc0a_JaffaCakes118
-
Size
877KB
-
MD5
3926bb48ffd6ba2c957b9fa27acbfc0a
-
SHA1
b30c4fc83f3705fc37a17b2398eb7f5626c84f28
-
SHA256
1efbb8bc2f15e861791ccb59cf991f9dc9d2c91b0383c41cc562defc126378b3
-
SHA512
bf98e2557801388246a23870a3446dfb29acb44c449c8666e15a7c369e19eba31a56530671c0be0cd774c3534ea59d4db34e7d14dac80f212318e1d5798788a4
-
SSDEEP
24576:v6rTzmPgSnhCC3ZWMc7kAJJTM1Hkrexp0YEGO:vCXKhU4AyHkYWd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3926bb48ffd6ba2c957b9fa27acbfc0a_JaffaCakes118
Files
-
3926bb48ffd6ba2c957b9fa27acbfc0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wtq Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE