Static task
static1
Behavioral task
behavioral1
Sample
3b1cf4b2510082a3e7a7693870200e7b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3b1cf4b2510082a3e7a7693870200e7b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3b1cf4b2510082a3e7a7693870200e7b_JaffaCakes118
-
Size
141KB
-
MD5
3b1cf4b2510082a3e7a7693870200e7b
-
SHA1
9a510bab131991f7d3449e841d398e25d140a186
-
SHA256
d7b26cc8f8817751ba7e918bd2cdb86fc1d29322888951b6e9aecb37e6a3ace8
-
SHA512
76acd05a13239f97f2a19b12edb0bc6c47476d7c215a92bd7c55b6a824b969f3680fbeff9622d4aac195004d60f35ff441bf5bb9ed2bd2904fa4465e1d606d5d
-
SSDEEP
3072:LayrtW6JHivwMvvbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU735eoc:LaqM4MvjwvP6bQ7yMP+DE827peD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b1cf4b2510082a3e7a7693870200e7b_JaffaCakes118
Files
-
3b1cf4b2510082a3e7a7693870200e7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 31KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gogoloa Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE