Static task
static1
Behavioral task
behavioral1
Sample
3e88c77e3cc2d3c5aff808925cb46290_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e88c77e3cc2d3c5aff808925cb46290_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3e88c77e3cc2d3c5aff808925cb46290_JaffaCakes118
-
Size
233KB
-
MD5
3e88c77e3cc2d3c5aff808925cb46290
-
SHA1
5ae52ed36eec823da7eaea1af8c10e9cad14ec3e
-
SHA256
09b07a1015c73842ffa6da1e050eb385a2b165e7afd3af09badce93e1b11502d
-
SHA512
3850c09052acc9f0959cff25a8328da9fd91e304dac0d25f0dfdc7251154151d2d73d7d5d33e829772696dafa68297b812f6b9d5519a22002e72cff174b2feea
-
SSDEEP
3072:SatmSWvR6Aw7JkLZuKe3t9jQMj5cntKWryRNFGrhBp4sejq3gWJ5c0LmUSqu/ZmP:SatmSVeENNor3YjqpJ5ha/AFvU2O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e88c77e3cc2d3c5aff808925cb46290_JaffaCakes118
Files
-
3e88c77e3cc2d3c5aff808925cb46290_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 106KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 38KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE