Static task
static1
Behavioral task
behavioral1
Sample
1b0e2a5745e6d7f7c1989b5bd3e62400_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b0e2a5745e6d7f7c1989b5bd3e62400_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1b0e2a5745e6d7f7c1989b5bd3e62400_JaffaCakes118
-
Size
382KB
-
MD5
1b0e2a5745e6d7f7c1989b5bd3e62400
-
SHA1
72d06981673cf682693566ce135db42a56a82389
-
SHA256
de426002a1542d923dd4488acfdda78118c430d0d3f087fb0f4bb7c29f5ffb82
-
SHA512
90a5b8a3791a4a70eb7b01e29ba26878c11329310eb72f766378a59064620c05109c502eea2be62cc8c4797ee125e66e6c8acb2e29a1c4d943c919144303eaee
-
SSDEEP
6144:XNVmTvBW8iAJdDIt3aq10BxS+6h+j+Smy3x:/opPIt3p10B7+St
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b0e2a5745e6d7f7c1989b5bd3e62400_JaffaCakes118
Files
-
1b0e2a5745e6d7f7c1989b5bd3e62400_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 788KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 382KB - Virtual size: 412KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE