Static task
static1
Behavioral task
behavioral1
Sample
1b8ef2e98e606136036186191a804801_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1b8ef2e98e606136036186191a804801_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b8ef2e98e606136036186191a804801_JaffaCakes118
-
Size
256KB
-
MD5
1b8ef2e98e606136036186191a804801
-
SHA1
d30111030df2e908d2dc5ff680f481ac9e486523
-
SHA256
392c1d1f7beac7eaf9f0026f74d17d566b95d2c367dcb36f9d2b1cc378c8a6e0
-
SHA512
3b5b1101341ff8b25ff3f59bc42f37c535999b4e2e2319eb57d61519b7ceb15660b9e3b1583753dec8a6dc4599b95aaa1d6277e73131189c1dd8232e6a548898
-
SSDEEP
6144:KXJWmG+2ikXEctSvQzbXYNWksi7rVfp4R0meVamLnpfxJIxD:SJWmG+2iOEcQvQ3XYNBsiFp4beQ2pJJu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b8ef2e98e606136036186191a804801_JaffaCakes118
Files
-
1b8ef2e98e606136036186191a804801_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�RA60 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�RA61 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�RA62 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE