Static task
static1
Behavioral task
behavioral1
Sample
3daa1734560244e056a43e7180ef7ca4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3daa1734560244e056a43e7180ef7ca4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3daa1734560244e056a43e7180ef7ca4_JaffaCakes118
-
Size
361KB
-
MD5
3daa1734560244e056a43e7180ef7ca4
-
SHA1
c1657e3c7e20336fc8a9f5a8afe81a45d8a80845
-
SHA256
b0b31566177271dae29b3666280c0354137314e5d1c3fef9231b761c47b2e300
-
SHA512
89089e196e0211dd385f11284f42c5ec67281cbe54d664218e7b260b6310d43062aa7a39b49382335900dc41b9c2579cdc0254b3acd42c0b73f53f3ed058ad97
-
SSDEEP
3072:cVjKKc+6sRl1ATyvGj6cVT5/r4NXedI9ZoKJImwcipv3kc8EaweND:cVOKBjNk6ctd8e2dJIrLEh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3daa1734560244e056a43e7180ef7ca4_JaffaCakes118
Files
-
3daa1734560244e056a43e7180ef7ca4_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Pav Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE