Static task
static1
Behavioral task
behavioral1
Sample
3da439624de6a4806ae94b8d16e6a4e7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3da439624de6a4806ae94b8d16e6a4e7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3da439624de6a4806ae94b8d16e6a4e7_JaffaCakes118
-
Size
33KB
-
MD5
3da439624de6a4806ae94b8d16e6a4e7
-
SHA1
29700b73ee6e41410772e9029338f85d8e52f003
-
SHA256
acbbe44bbb210501e20abe2afd06ab86fb562ad0492bc1b102424f7eb3f1e09a
-
SHA512
70bfd95d627fae8fd6fc787f180029d234e64b4895b20a0f1bce74086f16a9609ded42e1705ecdb6e0b9297c9672b028609063c328c43391fdd63cf806a8f3e8
-
SSDEEP
768:J9VTXWGaCuYaWBQ9cmoVi4ISZIpqa6OpXY7Fuk3EDmAV:J9VKGaCuU29c/ESZIpqalpo7Fl3EDmy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3da439624de6a4806ae94b8d16e6a4e7_JaffaCakes118
Files
-
3da439624de6a4806ae94b8d16e6a4e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp3 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp4 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE