Static task
static1
Behavioral task
behavioral1
Sample
1bc770c8b3f2b40c84f37afc5f57de3d_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1bc770c8b3f2b40c84f37afc5f57de3d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1bc770c8b3f2b40c84f37afc5f57de3d_JaffaCakes118
-
Size
44KB
-
MD5
1bc770c8b3f2b40c84f37afc5f57de3d
-
SHA1
7e7763fc71a41baef040a9650b918cca084b7dd9
-
SHA256
2a4b32c5933669b278b4e70f57ecce53ea91b04b2a00d8d76704c80bb27713b5
-
SHA512
51db1605df5aad41cfce3f2d7708f3273d21ea2439f02476e88a860951de6fd40243bd4e3728f9a869b9454e1d5241a8e8309547eafb68f0a83b46e23819b0d0
-
SSDEEP
768:tMQoGBwklqKSf2+vblbO1M72eJ9AYLacN5xyLO93kcPCjG4F8x4XrYI+Gj:2tKvylbR7h9Znr/9u64fVj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bc770c8b3f2b40c84f37afc5f57de3d_JaffaCakes118
Files
-
1bc770c8b3f2b40c84f37afc5f57de3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VtF$0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VtF$1 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VtF$2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE