Static task
static1
Behavioral task
behavioral1
Sample
3fd9d7734f85072169a781c0626307aa_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3fd9d7734f85072169a781c0626307aa_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3fd9d7734f85072169a781c0626307aa_JaffaCakes118
-
Size
17KB
-
MD5
3fd9d7734f85072169a781c0626307aa
-
SHA1
4858a3cd833c25b32c5c347768523fdb0f538eb3
-
SHA256
6976c6ca0886a465d9dee3fc509ba3c8cbfe118ced98f49457273d18580d657d
-
SHA512
3a56e781438119d96c0d8f909367c61c9368331e76980d1b5d54c6b15030d0ffdc6abdfa8f7f858173b9d21aad8b8f6f3d9070031e59af5a0b27a52c97fc35b0
-
SSDEEP
384:5keieg+m0XGhCLvrb0OB4QV1d3im4vyIvYMcd4LdP:ae/g0GhV0mV7cdedP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fd9d7734f85072169a781c0626307aa_JaffaCakes118
Files
-
3fd9d7734f85072169a781c0626307aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 15KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 767B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE