Static task
static1
Behavioral task
behavioral1
Sample
3a80fced27e19f7a35e6727f823014f6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3a80fced27e19f7a35e6727f823014f6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3a80fced27e19f7a35e6727f823014f6_JaffaCakes118
-
Size
373KB
-
MD5
3a80fced27e19f7a35e6727f823014f6
-
SHA1
c6fbc443c3014f01bb526e1ccfac0a037d18efe9
-
SHA256
ce3215fbebd3bc991e6b17d64d70e5876ebc404e08fb73cbcdb5f72523cd9c04
-
SHA512
f8ae66f5f85300ba31f74839c34ff0ed39f7768379dc2b819b379f416b7e21185b3370386db3590c414871fb2145a5963e6931390eb1db7176800a8550c290d9
-
SSDEEP
6144:17QvfKx1iy/Eh3VyeC2srMwOYDchmgzZgKnvpY+zbQeWGh0/cTXT2SNTpZpL8oik:9QXJy24bOYDcfZgDGbQeJh0/cH2SN/pF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a80fced27e19f7a35e6727f823014f6_JaffaCakes118
Files
-
3a80fced27e19f7a35e6727f823014f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
upx1 Size: 322KB - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE