Static task
static1
Behavioral task
behavioral1
Sample
cb3052c609dea2fad20f3fa89f94e851_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cb3052c609dea2fad20f3fa89f94e851_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
cb3052c609dea2fad20f3fa89f94e851_JaffaCakes118
-
Size
188KB
-
MD5
cb3052c609dea2fad20f3fa89f94e851
-
SHA1
1d3c51f4a606f7c8db246ae7c4f7370f2688b365
-
SHA256
23e5fc1cc3dfa8a3855adf7dc2703d4ba97a9d9ddfac27b31d8132b4a85febdb
-
SHA512
2dfca5edd45b91a00c7acd694d118170d7491ec54c94b20014c5006601da45d4063ded8aef1046093157ea761680572c9d6155481fb1fd11aa6b4978659c5472
-
SSDEEP
3072:oltKxnJeCtF6wLzIMwAVD8iYbgZW8KiGV+Yxy0xpRKlY32Fv:olYxZ36wIMxVD8v9iwKlY32F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb3052c609dea2fad20f3fa89f94e851_JaffaCakes118
Files
-
cb3052c609dea2fad20f3fa89f94e851_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ