Static task
static1
Behavioral task
behavioral1
Sample
b0b18f9d56988717b004ec432aa44638_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b0b18f9d56988717b004ec432aa44638_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b0b18f9d56988717b004ec432aa44638_JaffaCakes118
-
Size
320KB
-
MD5
b0b18f9d56988717b004ec432aa44638
-
SHA1
91c8740c239fea3f6225784965ff2c7866d2741f
-
SHA256
55e7e3ddb4e8c5bfecbdd494ce5f8ae4f28e37d9365d64ec64dc7a6c60e07024
-
SHA512
1a70fb929277c4b9214016ef0419279a82fb560f9a3f4aefd5d4cb785bb164678427bcbc3b8bca38efe9636f8705f59d86298615cac0e8024ddcb839110c4b71
-
SSDEEP
6144:2WC4YgB9GiywWC4YgB9Giy2WC4YgB9GiywWC4YgB9GiyzWC4YgB9GiyZWC4YgB9d:FtJ9GietJ9GietJ9GietJ9GintJ9Gizn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0b18f9d56988717b004ec432aa44638_JaffaCakes118
Files
-
b0b18f9d56988717b004ec432aa44638_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 35KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 741B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE