Static task
static1
Behavioral task
behavioral1
Sample
1be7b660a6b72ea69cdbf0b62fac27d5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1be7b660a6b72ea69cdbf0b62fac27d5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1be7b660a6b72ea69cdbf0b62fac27d5_JaffaCakes118
-
Size
532KB
-
MD5
1be7b660a6b72ea69cdbf0b62fac27d5
-
SHA1
3a6e624c706bd9145f520292c0f43983d27c8d1c
-
SHA256
3a7f98c7c670b4b3e601d05a0199a78824cd01cd110876ef787bc6181635e666
-
SHA512
b124aa7ddeae27abc888cc46a3761c17dce1ee48e572f8f579187378a318dc1d4d2104253d0fca6c17c73d5ebad5042cefd05c0b3287856dfebcc191d5ac9cfc
-
SSDEEP
6144:CN1vx9bQpQs7/TIu1PrCMIK+uyhUlh5CuHZ6VYwCAaM87lnI:ixx9spQsgkrCMV+zACuHIVYwDeI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1be7b660a6b72ea69cdbf0b62fac27d5_JaffaCakes118
Files
-
1be7b660a6b72ea69cdbf0b62fac27d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
BitArts Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 932B - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE