Static task
static1
Behavioral task
behavioral1
Sample
b1be0bdf53a72dfbb6e80abbf82fa13d_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b1be0bdf53a72dfbb6e80abbf82fa13d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
b1be0bdf53a72dfbb6e80abbf82fa13d_JaffaCakes118
-
Size
1.5MB
-
MD5
b1be0bdf53a72dfbb6e80abbf82fa13d
-
SHA1
3e040846e4cdab8a046c6db0d76fc956b3af1639
-
SHA256
6d298eadf632103d3b492a9736c7117220fcba3914bff250a40d1e971b16aace
-
SHA512
795ceb5372ccc8ce47b0a3a0a5a541f076ada54ed5f604b5554cbac3f9bb6c49c1e3bbe6917f34fdf0d9405942ffc378c507b113a60884c69b44a532a5500a6c
-
SSDEEP
12288:UZWtI6Rk+OB0vOB0Ju9OIOB0vOB0JurLxOIOB0vOB0Ju9OIOB0vOB0JurLl:Uuha+OWOhOWODZOWOhOWODl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1be0bdf53a72dfbb6e80abbf82fa13d_JaffaCakes118
Files
-
b1be0bdf53a72dfbb6e80abbf82fa13d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ