Static task
static1
Behavioral task
behavioral1
Sample
3fd5b8f8ce220382a5d5e72cc75b059b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3fd5b8f8ce220382a5d5e72cc75b059b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3fd5b8f8ce220382a5d5e72cc75b059b_JaffaCakes118
-
Size
96KB
-
MD5
3fd5b8f8ce220382a5d5e72cc75b059b
-
SHA1
d5f55d26209706b80c8f3698bc67b42419a43178
-
SHA256
a9118c17bd5ca4eda92e21179d27ccc1113436b8b901635a667828012a005fe7
-
SHA512
50567764956445ef7e501c980e45f1b83a8146658361399da27caeb897ed881f503ee9cde0b1149cf6874342340214e36e7d726c83063b632f69fe4528323465
-
SSDEEP
1536:9Lm1QTS6QP38Vo+2JLagmtSJdZ0nzOs7g4w5+e918uvDzcgcY:hm1QTS6QPseJLJi2d6zOs7ftk18ubzpT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fd5b8f8ce220382a5d5e72cc75b059b_JaffaCakes118
Files
-
3fd5b8f8ce220382a5d5e72cc75b059b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.wqil Size: - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.zguh Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.grmf Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gkzlr Size: 392KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lhoub Size: 52KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tpjgnv Size: 84KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xrhkvj Size: 492KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dywi Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ