Static task
static1
Behavioral task
behavioral1
Sample
b0fbdc98e9f4a9742e82576300968b17_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b0fbdc98e9f4a9742e82576300968b17_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b0fbdc98e9f4a9742e82576300968b17_JaffaCakes118
-
Size
121KB
-
MD5
b0fbdc98e9f4a9742e82576300968b17
-
SHA1
9bcfef28c5844cbe142e78d3e0ccfc74bf103604
-
SHA256
4e1dd2cb5f4c97ee43045d80553950e082d60ddd90a33936033d0b4297d6e3e1
-
SHA512
4539fc28b7576250250f5f6f1cdcf49fed791f9a21b1ef3a2a2f1e30c8f51c52226aac2a5361f73b61d8b872b221256d3fcc821a53d4719dcfa894122dc015d8
-
SSDEEP
3072:n/j/aqpgs31GglQHTF5b3gzeKatkFpXX9sATAxA:b/mV2Cqatap9HTAxA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0fbdc98e9f4a9742e82576300968b17_JaffaCakes118
Files
-
b0fbdc98e9f4a9742e82576300968b17_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE