Static task
static1
Behavioral task
behavioral1
Sample
3f0d21f31b1bf4cdacc81a3f943294d4_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3f0d21f31b1bf4cdacc81a3f943294d4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3f0d21f31b1bf4cdacc81a3f943294d4_JaffaCakes118
-
Size
678KB
-
MD5
3f0d21f31b1bf4cdacc81a3f943294d4
-
SHA1
ff74acf499898d86720455a49114366301eea431
-
SHA256
7bcdb162d73d822fef4e44950fadb69a0768f84e20e24e2e395c362b4124d3db
-
SHA512
2515d93b6b15cedc03a82d6038b494297ee2699429e799e552c8538c093810e35673a321f19d67f9e43260e745c6df5e4f8f6fafa10e31ba719f4200049dc849
-
SSDEEP
12288:f3lpBRa2FTWHBP9gUPfU6tNKnb2EJDA2wdPpZnVHv5gJMdoLb3b0Rz:f33Bo2iP9gUUqEnb5A7PPhx44Abuz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f0d21f31b1bf4cdacc81a3f943294d4_JaffaCakes118
Files
-
3f0d21f31b1bf4cdacc81a3f943294d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 745KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE