Static task
static1
Behavioral task
behavioral1
Sample
3ae0806b07fb68df6fd39a9070b38c07_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3ae0806b07fb68df6fd39a9070b38c07_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3ae0806b07fb68df6fd39a9070b38c07_JaffaCakes118
-
Size
688KB
-
MD5
3ae0806b07fb68df6fd39a9070b38c07
-
SHA1
212b23fc95676947457135aceca58c573fe0c6ff
-
SHA256
b6c777222d7ef0986263a31202fd50c1d90b22fca1d6a19ed91572d9e4ec06bc
-
SHA512
b20f2fb6ac310e99ce91d26df6a50dc7798d90b2dd320e44f81509ee02fb47e5ac2cf57973bf0329b4177bbccf85706e2dca654520628cb6b8f5ed61c72fb6d6
-
SSDEEP
12288:fNRlnwviXPiVLDtGmpwu9tE3SOvhK+rwfOh5mq19oMmlxIDi:frl5Pi5DtGmWu9tE3xZKFfmMq1D5i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ae0806b07fb68df6fd39a9070b38c07_JaffaCakes118
Files
-
3ae0806b07fb68df6fd39a9070b38c07_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 408KB - Virtual size: 407KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.srdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE