Static task
static1
Behavioral task
behavioral1
Sample
3b2cc86c335235c16e46922ab4d27900_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
3b2cc86c335235c16e46922ab4d27900_JaffaCakes118
-
Size
850KB
-
MD5
3b2cc86c335235c16e46922ab4d27900
-
SHA1
8c9e240a0cc6b3d54fdc284502379a3e4410c681
-
SHA256
b498d3c6bd28db850950ca516d4b70339c3f8b3a2ce371fe4cd734ec8d7fa31e
-
SHA512
95d7dbe2aee8c779943d46c5393a850f0fb0bbbea1f6eb87326258f7c59eef00add51c14b095e85cec980a88363978bb8db4fe20111242cf29f437754336ad43
-
SSDEEP
24576:O6rA2i3LaMeTuVulyWuuBBroJmZiR8XRoCitZbHIMMbOxx9:F4TUqmZLCJttIrOx9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b2cc86c335235c16e46922ab4d27900_JaffaCakes118
Files
-
3b2cc86c335235c16e46922ab4d27900_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
rvscpwqv Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mypdvxya Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qsyzowvd Size: 736KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
inresray Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE