Static task
static1
Behavioral task
behavioral1
Sample
3e748666ff9c044dc534f67a4d7e9d75_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3e748666ff9c044dc534f67a4d7e9d75_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3e748666ff9c044dc534f67a4d7e9d75_JaffaCakes118
-
Size
56KB
-
MD5
3e748666ff9c044dc534f67a4d7e9d75
-
SHA1
169848f8ca409b0becc4b2d75fa2a3d62b527f73
-
SHA256
a3e2a70537f2f390007edf5ec84bd501d48ca2c17c882e5d2c62ffb12f07140b
-
SHA512
6d2839e4df0d005a826d5ba753d0b8a5dcb6b952f41fc401a56efe440b885b74be3604a8ed602281dc46fd71e5588af5a16efd010eb8a01b1ef63b810527ca07
-
SSDEEP
768:bGjyiR7nPy+FTfD2T3PqT38E3cFJd/fo3ol3oMzgPx6uyR2jBYIscUh:bGWiRLpdDiObc/foKYyYSRJtcu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e748666ff9c044dc534f67a4d7e9d75_JaffaCakes118
Files
-
3e748666ff9c044dc534f67a4d7e9d75_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ