Static task
static1
Behavioral task
behavioral1
Sample
3a9f2b4304d91d628f2db504a575bec8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3a9f2b4304d91d628f2db504a575bec8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3a9f2b4304d91d628f2db504a575bec8_JaffaCakes118
-
Size
219KB
-
MD5
3a9f2b4304d91d628f2db504a575bec8
-
SHA1
d90ca184399a6fee7cd7fb4f6816946ad92fb0ed
-
SHA256
a1a876c6acb751ccb65a9f1b0dc70f04d0c956452c58ed5cc70c57fbf667952a
-
SHA512
9ab294ae7824193b7f9c83004ec312441762037de3e985ae57ede3212fd3186ffbc0dbcac90c1cfb994ae6129b1e7936f63f021cd5f1aa81a2f07ee183d5f767
-
SSDEEP
6144:XSk4Y5M8yfC/HMiuzcFt33BTFtWywTXYDn:Vh5kC/HMF4tJoqj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a9f2b4304d91d628f2db504a575bec8_JaffaCakes118
Files
-
3a9f2b4304d91d628f2db504a575bec8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.4MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE