Static task
static1
Behavioral task
behavioral1
Sample
3a8f2b0b81ca3c1990e10f1966210f89_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3a8f2b0b81ca3c1990e10f1966210f89_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3a8f2b0b81ca3c1990e10f1966210f89_JaffaCakes118
-
Size
24KB
-
MD5
3a8f2b0b81ca3c1990e10f1966210f89
-
SHA1
85fcf4c68e4eb668e25d00b6055fe7571f06b024
-
SHA256
b598867d1d9002d68f6d43d350989e6ed7d4ed586eed6475c41925ffa2838eb4
-
SHA512
f49f6df0cdc02725043c12ee419aaa71b32c5d14f1914c32e2ba58a91319d82aa38c6fbff0b873eb869774e3ef3eada20489a9dae53261b8cb3a8329929bddd3
-
SSDEEP
384:/jCAwwgJzn6aiwO1rf3A9O7Ik7cl1CVM63AhveH8N/FUfe1bIGUGNr0X2M+R69jR:eADQuaidr4rlgM63wveHuUW1btUGNrBE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a8f2b0b81ca3c1990e10f1966210f89_JaffaCakes118
Files
-
3a8f2b0b81ca3c1990e10f1966210f89_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 965B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ