Static task
static1
Behavioral task
behavioral1
Sample
b023b93279c48743ea87a70b639c7e65_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b023b93279c48743ea87a70b639c7e65_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b023b93279c48743ea87a70b639c7e65_JaffaCakes118
-
Size
173KB
-
MD5
b023b93279c48743ea87a70b639c7e65
-
SHA1
e9c49ca9502488fa92747af8510cf51c0549b820
-
SHA256
af64fb69d097ee1d4d5740e21e43a297ac78f670baf1600f3c989113274cc788
-
SHA512
20995f7dfc34afb8701d4a1023e40dfa3d3a87d30cf4779288a77b54f0d5070f1e9cd5bb795ee922c0febb643fe3f075e5f5735a9762ddeaa79f67739c99f1f1
-
SSDEEP
3072:9V3LPKBId4UJC2SP8nM3o99s/rF9DUH0sznJS8k36fnCrs71OEFv:jBdNCoM4yh9Dg0sznJS3gSsZOa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b023b93279c48743ea87a70b639c7e65_JaffaCakes118
Files
-
b023b93279c48743ea87a70b639c7e65_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.18p2$5 Size: 1KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rbss Size: - Virtual size: 3.0MB
.tss Size: - Virtual size: 436KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 122KB - Virtual size: 124KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE