Static task
static1
Behavioral task
behavioral1
Sample
3f0c0952d60c50d1bf74e5badad7ea34_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3f0c0952d60c50d1bf74e5badad7ea34_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3f0c0952d60c50d1bf74e5badad7ea34_JaffaCakes118
-
Size
95KB
-
MD5
3f0c0952d60c50d1bf74e5badad7ea34
-
SHA1
bb83c802ca092f2262049e7843d09e53e4d5591a
-
SHA256
b7371fdb340e5995caa6cac188aa607a539bdbc7768267b6e5ab0e351899a480
-
SHA512
1fd2c1d0b7747a662329fd8e34f1e55d50dbf11f8c981263470ff501aee1fd68a32914e8d73a143d9c693079a95ac026964c37399010b8adc44b9b3056b55026
-
SSDEEP
1536:j9ObzAxYHRZaxWm/Y035hySPJ/7503I1aQsuCLUYAfcDnq6o8CwA65pQzCkJSlj7:hyzwYx0xWmwEiSPJ90XhotfenU8/15pJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f0c0952d60c50d1bf74e5badad7ea34_JaffaCakes118
Files
-
3f0c0952d60c50d1bf74e5badad7ea34_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 143KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ