Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_3d7dc68e9ded817b01629c60d5051dd3.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_3d7dc68e9ded817b01629c60d5051dd3.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_3d7dc68e9ded817b01629c60d5051dd3
-
Size
270KB
-
MD5
3d7dc68e9ded817b01629c60d5051dd3
-
SHA1
e242215ebc88a3f3dae6be6fb529a30cf35b2a90
-
SHA256
2af800e3d5ec67396314fabd72fb543f4773b08a0c7ef4e2ab9b0906e7607b1a
-
SHA512
2a1537a340e8ac1fc2735185d1ad3580702aacc8c2589aeb6d9b0112da83b0026a1a735d7c81585f82a53ae8b11e325d92224a3af5495444ca0ba28b27500a2b
-
SSDEEP
6144:EF3ge/Luz9FR1eTboMMjZstEGnUKvf8QLBBzAM+GuN8QpKPn:o3ge/LeL5FGnFlLbzL+jkn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_3d7dc68e9ded817b01629c60d5051dd3
Files
-
JaffaCakes118_3d7dc68e9ded817b01629c60d5051dd3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
tugRBVHo Size: - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7giGYrZj Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
SFcg4Wkc Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KTUAWu85 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LhEimT7s Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ