Static task
static1
Behavioral task
behavioral1
Sample
b00a8145f91b7042ceef3923a1a53b0d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b00a8145f91b7042ceef3923a1a53b0d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b00a8145f91b7042ceef3923a1a53b0d_JaffaCakes118
-
Size
87KB
-
MD5
b00a8145f91b7042ceef3923a1a53b0d
-
SHA1
330d1f2cd01795b660d5d21d8c5f0f066e5b0471
-
SHA256
55b1ab5ea499dbd04654226d5bfe5be80304d5029e2d266964996dc6e4084982
-
SHA512
7a03928244cef823185e69657ab4cabf35f4666783a15c4f28cf5d4d1d1247021cd3e54d6847fc908012497c0f3067b3b55cf931d3ae877d8300ff4cd2bfeed2
-
SSDEEP
1536:8M7UltVQaVismc7LNHlXYC+puHsyB8/V2tR2dUrAZ0KS04hgTqU+51omv7RmIWCX:vUCXsF/NHlolIsyB8/vSKSrfpmIVSf+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b00a8145f91b7042ceef3923a1a53b0d_JaffaCakes118
Files
-
b00a8145f91b7042ceef3923a1a53b0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Obsidium Size: 512B - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Obsidium Size: 86KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE