Static task
static1
Behavioral task
behavioral1
Sample
b09d6794c53cd4916934e7f8318872fb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b09d6794c53cd4916934e7f8318872fb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b09d6794c53cd4916934e7f8318872fb_JaffaCakes118
-
Size
265KB
-
MD5
b09d6794c53cd4916934e7f8318872fb
-
SHA1
1a82294d6e46b2928cc80d1ff07c934280e33514
-
SHA256
1b816c1b55bb2dc762e7277d3d6dcc861edc202e42ce968a44c2036c917d43b0
-
SHA512
124f842499d2031579ef69be6859086a4c4d9c41a272aafc2285e28b3e9ee83807db4f5f027fba4b9c86f5a2d04c22bed5833acb1930daa10504dcfbd6f6643d
-
SSDEEP
6144:2k9vRj2ZgmZweYBI8XAZ1dYuA5gyVVn5x6YwH9VbHV7J8nDo:XdRYgmZweYBIaAndYy4V5x6YofbHLic
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b09d6794c53cd4916934e7f8318872fb_JaffaCakes118
Files
-
b09d6794c53cd4916934e7f8318872fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 300KB - Virtual size: 992KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE