Static task
static1
Behavioral task
behavioral1
Sample
3de41695ef1b3179fc91bd121bbe3195_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3de41695ef1b3179fc91bd121bbe3195_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3de41695ef1b3179fc91bd121bbe3195_JaffaCakes118
-
Size
1.1MB
-
MD5
3de41695ef1b3179fc91bd121bbe3195
-
SHA1
826d9c01e0ebbe6530a3eb25981621b40db6642b
-
SHA256
dfdd25a155c221d5f35037fc07ecc31608a11eb45e73793cc5b4d69a32cdeac9
-
SHA512
e7cd9ad43ae84dc8aa51a6d393644b65b77f876c3acfa19309f9a8690771e54b85aa35f1088733f3c28167501a222409454b3dad902d8f5b916298448646cb0d
-
SSDEEP
24576:w9niCwbUgpngxY8j180LaLR3PAx7DplWUwO0fomskpCxDpbjN6g3:w9niCwLpB+ZLCqhmNpCx9t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3de41695ef1b3179fc91bd121bbe3195_JaffaCakes118
Files
-
3de41695ef1b3179fc91bd121bbe3195_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 147B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ