Static task
static1
Behavioral task
behavioral1
Sample
3ee15c1550f3a89b617516bc3746649b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3ee15c1550f3a89b617516bc3746649b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3ee15c1550f3a89b617516bc3746649b_JaffaCakes118
-
Size
89KB
-
MD5
3ee15c1550f3a89b617516bc3746649b
-
SHA1
9e6075cc649502c53041167c64d037aedbee759c
-
SHA256
dae0904fb6a0a7245017e9e94d3259d9a08e3b7bc00efbfa8d3952ece87d75e7
-
SHA512
850a7eff155bbe48384c26f9548b93e8487dfe85cb980afaf1cc109b1f52596aae2153703a21abc0f3de7670f5c6db56e4fd1c0f800b77063e877dc01c733c12
-
SSDEEP
1536:cxv3EAn97/4tSNQ99xDc4uBneE3LquzHnxUbSxwi6OjQduaf:cdHpNQJw4w3ZebSxwtSQduaf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ee15c1550f3a89b617516bc3746649b_JaffaCakes118
Files
-
3ee15c1550f3a89b617516bc3746649b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: 294B - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE