Static task
static1
Behavioral task
behavioral1
Sample
b20ca773e684f43cb5e0e824b5e44f95_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b20ca773e684f43cb5e0e824b5e44f95_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
b20ca773e684f43cb5e0e824b5e44f95_JaffaCakes118
-
Size
2.0MB
-
MD5
b20ca773e684f43cb5e0e824b5e44f95
-
SHA1
7577f950f8481838a2681ce6f57dfa2ecb697ca0
-
SHA256
d4154b44a7f5a0d0eb5349705a4b3a7e0c1544d1ace32c907b27ba4d837e3fa6
-
SHA512
8518f021da61c332d8b8e3c89e138b0af8f4190af997cc99b954756179bbdd679de08bbd89e45c05b1079ff1ff8549742877424ee1e31a11d794ae3086ed49df
-
SSDEEP
12288:UZWtI6RksyOB0vOB0Ju9OKyOB0vOB0Ju9OKyOB0vOB0Ju9OKyOB0vOB0Ju9OKyON:UuhasyOWOxyOWOxyOWOxyOWOxyOWOzB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b20ca773e684f43cb5e0e824b5e44f95_JaffaCakes118
Files
-
b20ca773e684f43cb5e0e824b5e44f95_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ