Static task
static1
Behavioral task
behavioral1
Sample
3f9b184d32e0f8884f3d40a19bb1ac6c_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3f9b184d32e0f8884f3d40a19bb1ac6c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3f9b184d32e0f8884f3d40a19bb1ac6c_JaffaCakes118
-
Size
808KB
-
MD5
3f9b184d32e0f8884f3d40a19bb1ac6c
-
SHA1
882bea74d90a7122934f340adf682542ec117977
-
SHA256
9ced1a96fa562081d2592208c9f36e5564a5b495d432c9a555009afe5768480f
-
SHA512
dd31f0d46a73adaab26fb9dbec53d844164e42138e630bc67edc11bd5245f44aa1379fcfabc8043d5fb8363e8296a7697fc77280c53fde42e6f8fb6378c01e4e
-
SSDEEP
6144:YWUjFsEvnDmZf7aY76LXexNZCALolBOPvZayZaY7/SZ01n+SogK7sIlYHw7:YLFJof7a/01n+iKVl+w7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f9b184d32e0f8884f3d40a19bb1ac6c_JaffaCakes118
Files
-
3f9b184d32e0f8884f3d40a19bb1ac6c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 572KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ