Static task
static1
Behavioral task
behavioral1
Sample
3db3bc22fd1234d89f3df8eddcb143be_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3db3bc22fd1234d89f3df8eddcb143be_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3db3bc22fd1234d89f3df8eddcb143be_JaffaCakes118
-
Size
33KB
-
MD5
3db3bc22fd1234d89f3df8eddcb143be
-
SHA1
44112cae083c836fa0a8cec00b71985b18a66a10
-
SHA256
afd188fb6365576852364d473f965a2ed597d765967ba9a98a1f829e1fa9765b
-
SHA512
e9d97d4e311c54ac7b73d1c41673f01564ed3fcdbcf710319526d70e6d2e76e4f5143202e5d4227fda5d9cd84bd04f6398fd5acc6254ba24093aa5786a9f02bc
-
SSDEEP
768:kZE352VIZ2N0QHsRUY/taWFym8RwkyFNVp:ZcQMaX8WNkyX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3db3bc22fd1234d89f3df8eddcb143be_JaffaCakes118
Files
-
3db3bc22fd1234d89f3df8eddcb143be_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 25KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE