Static task
static1
Behavioral task
behavioral1
Sample
013b9926769f4199d5256ee4f9d1437e_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
013b9926769f4199d5256ee4f9d1437e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
013b9926769f4199d5256ee4f9d1437e_JaffaCakes118
-
Size
19KB
-
MD5
013b9926769f4199d5256ee4f9d1437e
-
SHA1
8bb89777e9138f3d545a27fb3ec62816ec39ede1
-
SHA256
f566957cc6bb26cb37b01fa6c7c63d5f068b35f9e03cd436291c42de11fe56c8
-
SHA512
3f35428df840c01956f07b5927a1593ccf26d0ba2e9d23a8b27ee1c46ea250172a9e90d0fd6c6476a90a0c407071cd7cc6a611c730472c2124f2d612956d7584
-
SSDEEP
384:NmSBDYX+Ex1GgDJw3wiAnQyrybfrtDdALIB9vYjaNJawcudoD7U2w:NdgHlNwg596frtDdASpLnbcuyD7U2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 013b9926769f4199d5256ee4f9d1437e_JaffaCakes118
Files
-
013b9926769f4199d5256ee4f9d1437e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE