Static task
static1
Behavioral task
behavioral1
Sample
b0ad80cd2058e7a0e505d58be0f2740e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b0ad80cd2058e7a0e505d58be0f2740e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b0ad80cd2058e7a0e505d58be0f2740e_JaffaCakes118
-
Size
52KB
-
MD5
b0ad80cd2058e7a0e505d58be0f2740e
-
SHA1
a5d95f615abfa2b7db4773476041a2e4b9a9fcd8
-
SHA256
fc976956b6ce734c0517e999c16a5b0f97924480345c60003277370d22b817c4
-
SHA512
1b6cc5ab1fbd79a04140426790feacdd432a52c4a38cd1716e12ab8a05d83c4cf4a78453d08994b1d2a9b245f16b6c3c1c866428b22af1a4323e88dd9c177471
-
SSDEEP
1536:NU6JhlQvW4R8ZDW2OsdCj7VhJ/YY5rInouy8r:NRhlARSOsdwD/98out
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0ad80cd2058e7a0e505d58be0f2740e_JaffaCakes118
Files
-
b0ad80cd2058e7a0e505d58be0f2740e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.... Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.... Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE