Static task
static1
Behavioral task
behavioral1
Sample
3964de88f7d528874a136e42dd134457_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3964de88f7d528874a136e42dd134457_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3964de88f7d528874a136e42dd134457_JaffaCakes118
-
Size
355KB
-
MD5
3964de88f7d528874a136e42dd134457
-
SHA1
2b129a7f8870821608fd01c9514238c50a2b7148
-
SHA256
6aceeccbd8538165d20c2406a54e01a4e6c65355b550003b04cf94d321a458c8
-
SHA512
2e04bfd14b54851cafcfe807600704a4b7c62f8afd5699f68c1cc4df0a55c28ccf14db9093c0846565fb47e18c6a3a71d7841929ea330b075a9c58a7ed3ccdff
-
SSDEEP
6144:NNLfhaFEfIBslOSEUOuTZk62S0s1MO75yAnEFJmLukQ8B0OxXdt68F:NNLfhSEwylOSDF2XSNgWnjB0cNtV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3964de88f7d528874a136e42dd134457_JaffaCakes118
Files
-
3964de88f7d528874a136e42dd134457_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 351KB - Virtual size: 351KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ