Static task
static1
Behavioral task
behavioral1
Sample
b0fc75c870d3beb0932af549eb7a7cb6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b0fc75c870d3beb0932af549eb7a7cb6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b0fc75c870d3beb0932af549eb7a7cb6_JaffaCakes118
-
Size
36KB
-
MD5
b0fc75c870d3beb0932af549eb7a7cb6
-
SHA1
6142c76cf3717b68235a8382a757263e23dcb28c
-
SHA256
5c3712c75252ef78ed232dad26c4ca1ed8341a0818895fd543eee409be8c603d
-
SHA512
076ad8df0d5a9c0eb0f12ab53734e0f8ed5b596e0912c8b8a9f20a2b032f0c70607c3e520f3ffd43be797fbf58e49ab54fa216a0e1449f7c6ae605055bd67066
-
SSDEEP
768:h2Ht8Bn4ZCU9658nJUhkhXp1LB542Z5DOJrIyOzTr3GFZaY6:sHYnlj8nqMp1L8I5DONIPDGFZJ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0fc75c870d3beb0932af549eb7a7cb6_JaffaCakes118
Files
-
b0fc75c870d3beb0932af549eb7a7cb6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE