Static task
static1
Behavioral task
behavioral1
Sample
3bc86ac6b99cd20ae67a38f81396aca5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3bc86ac6b99cd20ae67a38f81396aca5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3bc86ac6b99cd20ae67a38f81396aca5_JaffaCakes118
-
Size
839KB
-
MD5
3bc86ac6b99cd20ae67a38f81396aca5
-
SHA1
8ca449b1fde37550983f4b9ff839748d7e227f12
-
SHA256
bebc3da436336c51dd91d24c9f57dc84743775f89f878c0eee75d442372b3749
-
SHA512
c6c3c0989f75dc88548ed8f2ba4801328034377939736416299ea4496d7bf73e79ff12906f5d9e9fe2b51aae2a65cee56f3ad13d078d60cbb5fdd84c75e77f75
-
SSDEEP
12288:LIfKxn3qGaNHEyC9/oR9gy5FHK7znJ8oL6LuUe6pD24QGGnC+i8KQKcusXgPTlrf:LkKpPp9AR95yaoLEa9M+5XgrlL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bc86ac6b99cd20ae67a38f81396aca5_JaffaCakes118
Files
-
3bc86ac6b99cd20ae67a38f81396aca5_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 813KB - Virtual size: 812KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ