Static task
static1
Behavioral task
behavioral1
Sample
3a0491a21a9c68984e385dc36b85ecd0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3a0491a21a9c68984e385dc36b85ecd0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3a0491a21a9c68984e385dc36b85ecd0_JaffaCakes118
-
Size
236KB
-
MD5
3a0491a21a9c68984e385dc36b85ecd0
-
SHA1
a953a039ef3fe5651dac8c14c58509297a765985
-
SHA256
68b2596f357b85c39655971ddf59814cb11b0f43d74e7407f627c41c88d264a3
-
SHA512
7c1ac6672d233e1ac93ad66965da01156dc5eca00f47f408b113eaea4a05d217c3cb02263ae19ec26bd9dc006d6c04d2e8e6e89b18d0dedfb1a5f1a68aa49d34
-
SSDEEP
6144:m0HXltPxQYzHZT5gItvsv7puAlBX6T8RXDkCupiHhzCGSd6iCT1ckxzGxp:m0XB2ItU1XcWklpw5CnH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a0491a21a9c68984e385dc36b85ecd0_JaffaCakes118
Files
-
3a0491a21a9c68984e385dc36b85ecd0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 661KB - Virtual size: 661KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 188KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ