Static task
static1
Behavioral task
behavioral1
Sample
3d3702777c3e2453a550824be43179d4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3d3702777c3e2453a550824be43179d4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3d3702777c3e2453a550824be43179d4_JaffaCakes118
-
Size
174KB
-
MD5
3d3702777c3e2453a550824be43179d4
-
SHA1
3aeef86505773f580ec176a8c72085b2605cd75e
-
SHA256
05cb47d39dd3f63cc0b045d573c8d775c687f2287908609d161248bc53f61ef7
-
SHA512
9d639bb1a165c34d15b91eee0b04c2e6d03b9e1b057adfe6f2343d1ca40d31be1780b07f3a78bd6a37c4f51cef8f105f946b028199b9c349f8b301c2a1fdad3d
-
SSDEEP
3072:0zQGTXwg60nuVDb23OYKzkW+F2ILlyUJWWZecnhhcXte2sJHFLMs/5WK3II6Cxhw:0twgln33WkF2idZecnl20lHRxp3gx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d3702777c3e2453a550824be43179d4_JaffaCakes118
Files
-
3d3702777c3e2453a550824be43179d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 34KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idp Size: 324KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE