Static task
static1
Behavioral task
behavioral1
Sample
1b5bcc257a6641c28eda54fe7e6cf3bb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b5bcc257a6641c28eda54fe7e6cf3bb_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1b5bcc257a6641c28eda54fe7e6cf3bb_JaffaCakes118
-
Size
51KB
-
MD5
1b5bcc257a6641c28eda54fe7e6cf3bb
-
SHA1
14718dae490308ae61c3143feca4098db170b352
-
SHA256
c1a79a688637f846f2e5dc647a08aa04da3cd6eabe97814a2b3585a42ad0d8ed
-
SHA512
31b8f181d6ce70060860eb4970fdfa490b736e7589fd5494cc41627359bca1b5329b33955fbd895bbf0d036d450d709a35f6c0ed5427418e16f352d674ff4d1b
-
SSDEEP
768:s1ODKAaDMG8H92RwZNQSwcfymNBg+g61GoGwXnKxrvo7TnIuSjvgkGOxJVqL4IbM:2fgLdQAQfcfymNG+KxrvOnl6vAOxJ0lM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b5bcc257a6641c28eda54fe7e6cf3bb_JaffaCakes118
Files
-
1b5bcc257a6641c28eda54fe7e6cf3bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE