Static task
static1
Behavioral task
behavioral1
Sample
b0ec2c5918dd95a47809dee694390211_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b0ec2c5918dd95a47809dee694390211_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
b0ec2c5918dd95a47809dee694390211_JaffaCakes118
-
Size
74KB
-
MD5
b0ec2c5918dd95a47809dee694390211
-
SHA1
1d4d42417a134a623f83c68de176d12ee24e4ab6
-
SHA256
14b8a11e6047a8ade74a43b0665adb7bdc159351cc7f2df96b902229c7f52154
-
SHA512
83caa2f1bfc968adfba305991023a32944ce4f22abc7486e4235c9a8cab20bca150b60d1927d59f438b1dde4a24e0762d3f52386813b3d7342a77051d1ba578d
-
SSDEEP
768:cpz1ipRcHSM7NWfZFfaLXO169C5VvHZwm11avpXl5BbCTIAgjUFY4HeA0yDM:cHsO1c/iLe164FHZA/5B1AbeII
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0ec2c5918dd95a47809dee694390211_JaffaCakes118
Files
-
b0ec2c5918dd95a47809dee694390211_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
������� Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��� Size: 256B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 256B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsr Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ