Static task
static1
Behavioral task
behavioral1
Sample
b6099847e6b95172b151d04163f893f0_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b6099847e6b95172b151d04163f893f0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
b6099847e6b95172b151d04163f893f0_JaffaCakes118
-
Size
459KB
-
MD5
b6099847e6b95172b151d04163f893f0
-
SHA1
013396d12e627e51ec4ae768b44b531589fc9639
-
SHA256
948e8303fa703f90f9f7159c8fa234dc0f74c5225cc7ec8eb0a2cdc12dc42584
-
SHA512
4d7c6631583846c21ce18a47f98cf070e3c9ebba39a4ff255612056ab7629f7d79844eeb7cdef0ca7499fccf33cc6d86531e947f5eb071ea7c901264f1df3753
-
SSDEEP
3072:USHWiNo/ftfQKAc94/3bXZ3Nk6Rk3mQs9BCX8TKza9+RZ00ajE2Ej8:UZfec9EbXDk6RkWBEKFLE2E4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6099847e6b95172b151d04163f893f0_JaffaCakes118
Files
-
b6099847e6b95172b151d04163f893f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ