Static task
static1
Behavioral task
behavioral1
Sample
3b5e29d25e8fe72898db0b89ce2957e3_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3b5e29d25e8fe72898db0b89ce2957e3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3b5e29d25e8fe72898db0b89ce2957e3_JaffaCakes118
-
Size
945KB
-
MD5
3b5e29d25e8fe72898db0b89ce2957e3
-
SHA1
38981bf6911766a2712a37a0147790e12dfe9061
-
SHA256
a8692e17a617ae28d9aefe23be38504a37d1af69291ab80ebd58cdb0615c3845
-
SHA512
f8f1dd476d2ca14acadc71f11b12eaa5583a816a9ce62c1b6b7d159d765cc56e5f0f774e6c9a01732fdb95a9d782d4521637e1e71d088bb28f3d27bffba118bb
-
SSDEEP
12288:cyq/7lOOTfnqTRUz/WiO7K9LkarrF7/UYO3ayaro5g:k70OTfnqyz/tdkYFVyarsg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b5e29d25e8fe72898db0b89ce2957e3_JaffaCakes118
Files
-
3b5e29d25e8fe72898db0b89ce2957e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 52B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 745KB - Virtual size: 745KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pmj Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE