Static task
static1
Behavioral task
behavioral1
Sample
b04a613282d202408128ed5fff40a4ec_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b04a613282d202408128ed5fff40a4ec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b04a613282d202408128ed5fff40a4ec_JaffaCakes118
-
Size
423KB
-
MD5
b04a613282d202408128ed5fff40a4ec
-
SHA1
b3a0f992a54e30f9abdb7f39a0fb89cdbf89403c
-
SHA256
a175032d18e488a8f2e5424f6dc39624d2b838dbf862bc157aaf726cc67d7f59
-
SHA512
354864c744254c8e1db132ab0fd3c7d2ef5f5b7c03c2a0a03d023a3762e7833e6e53892b37ca939513a13f7c165aee2bf9677c585bfdcf4d63c81d3bb165cda4
-
SSDEEP
3072:HknKNfxzhek05ysk4tGc+Fkfy1x41YD7YEv4KvjIajR:0mfxJXzXV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b04a613282d202408128ed5fff40a4ec_JaffaCakes118
Files
-
b04a613282d202408128ed5fff40a4ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RsRc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
virtu Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE