Static task
static1
Behavioral task
behavioral1
Sample
b110d400aaf31d9515dfab946427fea2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b110d400aaf31d9515dfab946427fea2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b110d400aaf31d9515dfab946427fea2_JaffaCakes118
-
Size
94KB
-
MD5
b110d400aaf31d9515dfab946427fea2
-
SHA1
10e50188d6a5877357e350efa17040cd14548861
-
SHA256
983e4e25018fc067bd5ac5ee414d5f066e56462c10aeddb1b1104f2375ad2b36
-
SHA512
40ec5c258acab9d3e12e3e4da1e56007c72c66b7eb6917a57c6895d4d84f20f6dc177ce43b096d9e0e892e7a2ef53890fb2a9d1146c3617a9b2e48bca57e4f83
-
SSDEEP
1536:6JUdRdPtChK3vvcgfOKaaTeqE4dR/cK6Ry1mjfy6vjeD5K0VQ3BV9DNX:HdCc3vEUjLHcKOLK5K0eRBX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b110d400aaf31d9515dfab946427fea2_JaffaCakes118
Files
-
b110d400aaf31d9515dfab946427fea2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 853KB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 877KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ