Static task
static1
Behavioral task
behavioral1
Sample
3fcdf8640f717df558462e62b1b03673_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3fcdf8640f717df558462e62b1b03673_JaffaCakes118
-
Size
122KB
-
MD5
3fcdf8640f717df558462e62b1b03673
-
SHA1
beaa73386091d4ea6f9ca1cb7d4a4c04616e89ab
-
SHA256
dd53bea424a1aef8c7faf81238f6e39440be54cbc00c6ba405663dc34e092803
-
SHA512
c1dfb72b74448371b9c0596cd165fa8815f330b1e6135b32f63c8c36ebfc2ed8b51a024fee80fb4fb94a181b8a77619bbe7d0f8a695a3760b7e39d612080f0fe
-
SSDEEP
3072:x/IShnMSOL/KFhBCQ2gBM9y0nnMNijsHuhw3pZBwi5VaN:SQ5OLETCxFJnH4OITBb5VaN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fcdf8640f717df558462e62b1b03673_JaffaCakes118
Files
-
3fcdf8640f717df558462e62b1b03673_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 634B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ