Static task
static1
Behavioral task
behavioral1
Sample
3fba6d638eb9c5034b987e7c07d76934_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3fba6d638eb9c5034b987e7c07d76934_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3fba6d638eb9c5034b987e7c07d76934_JaffaCakes118
-
Size
13KB
-
MD5
3fba6d638eb9c5034b987e7c07d76934
-
SHA1
f54f77638f709042044f4ff3b834dcf337205838
-
SHA256
e170a454664bac64ee60924c4c935e0cdf56f1a174ad68daf8b07e8bd1546889
-
SHA512
4732e38a1f2a92e131a7e0b946906fca10d1a29a663ec8f0df3179b6f3bb5519392d87c5126db7563218c5c8a0a71ddd333b97385b9171c65f86c16c7a975964
-
SSDEEP
192:0GVJxLx2hy0XtnuA0MSA7YZQluY+IS5znDxXsL:HV/iX6GqzJe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fba6d638eb9c5034b987e7c07d76934_JaffaCakes118
Files
-
3fba6d638eb9c5034b987e7c07d76934_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE