Static task
static1
Behavioral task
behavioral1
Sample
b0e52256b519f5cf0adae37c2013c04f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b0e52256b519f5cf0adae37c2013c04f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b0e52256b519f5cf0adae37c2013c04f_JaffaCakes118
-
Size
148KB
-
MD5
b0e52256b519f5cf0adae37c2013c04f
-
SHA1
d1e5874e5235c91ef1c1c5d0aed537c3d4d437d0
-
SHA256
1b1e1aff75f73de8cd683a15ee3c5ac5c08c998850d1591a744a64308ff08581
-
SHA512
7ddf974cc057cfe418e1d3825666b9a9ebef6b609d0319c5938640e857ba2ccd98131277ed45463014008c7826cfe8db6238645b0830187d0850810ba4cc1ca3
-
SSDEEP
3072:g5BuV7IR+H7p+bYqTO5+wm8FN+pfx2cTrGSOMPy2:g5CtH77qL8oNIMP1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0e52256b519f5cf0adae37c2013c04f_JaffaCakes118
Files
-
b0e52256b519f5cf0adae37c2013c04f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
import Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data Size: 40KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE