Static task
static1
Behavioral task
behavioral1
Sample
b0dde1bccc91591e136eff011aa4b0de_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b0dde1bccc91591e136eff011aa4b0de_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b0dde1bccc91591e136eff011aa4b0de_JaffaCakes118
-
Size
3.9MB
-
MD5
b0dde1bccc91591e136eff011aa4b0de
-
SHA1
b2dd6a7804ffbd7661462d64bba8ee5aa5d0077c
-
SHA256
94c208de0e803622f73dead65ebda7b9e065f90ce49b52149ccf4937926ced5a
-
SHA512
6867513501efd25309acc8bbb0c9b774a00dda9fd7dda92bef3ccca42d6cc95ec520a91814b5886a694a7ad0c1ef3fdaa4d415fe531451da696ec754ba293ff9
-
SSDEEP
49152:tZqhaK6zbfqdlqlYvoGxUSJpXk9Z2YWPWQf5v4ZiINNeOosSEp6:txJsRXkKYJNnp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0dde1bccc91591e136eff011aa4b0de_JaffaCakes118
Files
-
b0dde1bccc91591e136eff011aa4b0de_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ