Static task
static1
Behavioral task
behavioral1
Sample
3a704bb815947f273e25da3028ad974b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3a704bb815947f273e25da3028ad974b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3a704bb815947f273e25da3028ad974b_JaffaCakes118
-
Size
336KB
-
MD5
3a704bb815947f273e25da3028ad974b
-
SHA1
a68a5bd2e40ae1e95de11af12077b892067310d2
-
SHA256
e9424d7d0c4de428d6c6cc3039269bb64add19f2123dd0ac19f20df36d07feb2
-
SHA512
c19864432b6cde4c34a7d8268e185cbba6352d8074817c1c416ba7e8de7a613d2890ac9585427fc065e8111bedd9a0e1708f0841d310c0cc3bdee782c32c95a8
-
SSDEEP
6144:BJkqma09BoxrzeiK17Ms3pt6gVYSzmipX8VVkomoTgMXuK62EylCgQMPkTlh:BJkRroBzeiNQfpyV9moTX5EyVrk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a704bb815947f273e25da3028ad974b_JaffaCakes118
Files
-
3a704bb815947f273e25da3028ad974b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 264KB - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE