Static task
static1
Behavioral task
behavioral1
Sample
3dcf236c377bd8cf1c7c9ba91046f7a5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3dcf236c377bd8cf1c7c9ba91046f7a5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3dcf236c377bd8cf1c7c9ba91046f7a5_JaffaCakes118
-
Size
410KB
-
MD5
3dcf236c377bd8cf1c7c9ba91046f7a5
-
SHA1
7a65bd2a5f31b7ba423f2df5cbb9f84888aa2222
-
SHA256
ce00757cb8f0ba4593caeec3301d4ac5678c1a1c673f1047d5d28578512f0b58
-
SHA512
f0629e370519fdcf115a0ebfdb505c21a3347e6fa0d83ebca0f535ae3c1ac15ebaf8b9fb7cea86165345f18bc804d565b8fa4543b44c56b0def0c05cf7737f8b
-
SSDEEP
6144:sDIKU6UATlrVYJZxVicuS22Id7Zx8tWj6Sx7FEuVrNGpOQUpRWEXVLh5pZzih06:sxUYlpYOck7wLSx2EspRUZX9h5Piz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dcf236c377bd8cf1c7c9ba91046f7a5_JaffaCakes118
Files
-
3dcf236c377bd8cf1c7c9ba91046f7a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM
Sections
0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 280KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE