Static task
static1
Behavioral task
behavioral1
Sample
00c438b70d3f9c10c7fee47436b07cfa_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00c438b70d3f9c10c7fee47436b07cfa_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
00c438b70d3f9c10c7fee47436b07cfa_JaffaCakes118
-
Size
32KB
-
MD5
00c438b70d3f9c10c7fee47436b07cfa
-
SHA1
1f6b34310a45178c1cb67d0177944cac39ac2805
-
SHA256
18f748eecbf952794c2a81dffd633804c16397b8a471ffa4642bf587f4132ef2
-
SHA512
cb1f40f062d88b8309be6b81a3996eb6247782ed3697d330f5321f1d0fca6d3758d65a0b9b9d54fd29ad278f2d77317e95be1f7f2d85dded74b7d5a717e35a64
-
SSDEEP
192:NGpDzpUj2WFE71OfZGwnJgBUfLSOoaAjE+ux+zqmM7o/5shdZXZZwa5YzGgrGzl9:gjWy71OfAMgB4/v+umNYH4wDJWy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00c438b70d3f9c10c7fee47436b07cfa_JaffaCakes118
Files
-
00c438b70d3f9c10c7fee47436b07cfa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
KuNgBiM Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KuNgBiM Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KuNgBiM Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KuNgBiM Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE