Static task
static1
Behavioral task
behavioral1
Sample
3e8ca4e58e2d0b6563c5114feedbd537_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3e8ca4e58e2d0b6563c5114feedbd537_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3e8ca4e58e2d0b6563c5114feedbd537_JaffaCakes118
-
Size
149KB
-
MD5
3e8ca4e58e2d0b6563c5114feedbd537
-
SHA1
2932a2ad22776d1c9877b7c7cc42431cb05781fa
-
SHA256
791480f5beec64969a3412a1eb86ff799775364370d7386e01d46f1f221458e6
-
SHA512
2e2c2184611000242f175137c20e23bdae264c2c9a16f4ad441bb3ee22957fae439ed7a0306594953d44bd0b276cb51160b81513583ec50558e708e343d5ac23
-
SSDEEP
3072:cw6kXKRLC2ZfBypo92eyTfN/U3tYxcq3y8VMSm2bjG1:cEILC+f592e+lM3tYx939uSmijG1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e8ca4e58e2d0b6563c5114feedbd537_JaffaCakes118
Files
-
3e8ca4e58e2d0b6563c5114feedbd537_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 392KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE