Static task
static1
Behavioral task
behavioral1
Sample
3a33ca86f1609a90e4a278de4ac39d52_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3a33ca86f1609a90e4a278de4ac39d52_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3a33ca86f1609a90e4a278de4ac39d52_JaffaCakes118
-
Size
87KB
-
MD5
3a33ca86f1609a90e4a278de4ac39d52
-
SHA1
9ca974280b8947d4f211eb025860133d70f83d65
-
SHA256
67edf4220ae7b1a5c4a4ce510d97de588525748a1e4fb8e686a386c449ab9b63
-
SHA512
9a32daea853859c39116acd122869a7557d733f436b2df0e1ea9fc2266bd02fb97fff26bdaf8b392a5c755888639d43298b4f5349848c64d8f327ae14e9be841
-
SSDEEP
1536:0pua8XVbhan+202vzmAAtaE89KeUm1MEQai1DZ1CInx5goJbhSKnp+:0ca8XVbhrAzkhjpmOEODZrnDrlSip+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a33ca86f1609a90e4a278de4ac39d52_JaffaCakes118
Files
-
3a33ca86f1609a90e4a278de4ac39d52_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 129KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
peei Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE