Static task
static1
Behavioral task
behavioral1
Sample
b0fd07ebb9cddb55456993757f0f3bc5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b0fd07ebb9cddb55456993757f0f3bc5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b0fd07ebb9cddb55456993757f0f3bc5_JaffaCakes118
-
Size
81KB
-
MD5
b0fd07ebb9cddb55456993757f0f3bc5
-
SHA1
b32fe8cda50c0fc919c88599ec7e69d47f6d4085
-
SHA256
1d194ba54cf07515f4e411f0a15efc74f968c3a39c45269833fd1b177df73150
-
SHA512
ae70193d97183700ee50cd31deadd1e4f3f99d6e831c90962b5a7394851a4d45814c71282390e2e75372ffa12b020a00768f38430d6f2af9ba41f88fd5b28178
-
SSDEEP
1536:+5WU65GPmwpAGPg4BaO+YmRqKK3YJ86dhB2tkcvf/YnA7s82q5BWV/yv:wW8e8xgeheKYO636/AP8p5BWN0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0fd07ebb9cddb55456993757f0f3bc5_JaffaCakes118
Files
-
b0fd07ebb9cddb55456993757f0f3bc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE