Static task
static1
Behavioral task
behavioral1
Sample
3985d647d6c15bde66882ff8a01d5930_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3985d647d6c15bde66882ff8a01d5930_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3985d647d6c15bde66882ff8a01d5930_JaffaCakes118
-
Size
858KB
-
MD5
3985d647d6c15bde66882ff8a01d5930
-
SHA1
2099a27c9815f0d12390d3ad3df08569ddf6a718
-
SHA256
a819cff584c6b78adb323a8863a4d78df3af901657db6ebe677dbe7af57a71c1
-
SHA512
ee5277ae232dae7c9b05290c176c87182ed665941d9f2e166d5265bc5a023852aae3d5dd90e9c719e78a5348f8a32212b103ed867095138465e82ac277bd4e43
-
SSDEEP
12288:bw/7H1EbdjQGHjjJdoVQLLP951Au67cG/t93zKJ7I4Sp4HTrwaa2o7YR+AooS:bwLelQGD8Qlgu6oG/t9DOTUa9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3985d647d6c15bde66882ff8a01d5930_JaffaCakes118
Files
-
3985d647d6c15bde66882ff8a01d5930_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 832KB - Virtual size: 832KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE