Static task
static1
Behavioral task
behavioral1
Sample
3da303ea6eb537c59731eb05e931cfa8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3da303ea6eb537c59731eb05e931cfa8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3da303ea6eb537c59731eb05e931cfa8_JaffaCakes118
-
Size
245KB
-
MD5
3da303ea6eb537c59731eb05e931cfa8
-
SHA1
d521ab23e114b34e7f5dd7c27a37c27081706f29
-
SHA256
67d25b7bb7c38df42d2fd49a6a6cc0bb43f4a9500ebbeaa2b23300cfce17c2d8
-
SHA512
4b75742c0a31f64ed9f0cb400ebb767e1824bf74c3ff54dad50eeee2ebcee9d58915f00b7906a5554182ae52f070ec9cd5eb3d7f099c13f3e95656e597a090af
-
SSDEEP
6144:TP5XYyIleRGZzmqrxU78uWbs5DXwXaSlFC89VQ:TRXmDvU7EssXaU2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3da303ea6eb537c59731eb05e931cfa8_JaffaCakes118
Files
-
3da303ea6eb537c59731eb05e931cfa8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 824KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 244KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE