Static task
static1
Behavioral task
behavioral1
Sample
b0cdd91b160ccac0785e490048190912_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b0cdd91b160ccac0785e490048190912_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b0cdd91b160ccac0785e490048190912_JaffaCakes118
-
Size
97KB
-
MD5
b0cdd91b160ccac0785e490048190912
-
SHA1
ff3678a46eed35ac31198385b669187ea2a41e29
-
SHA256
5d761cde8ed635d38df5aaf9a1d19bf2704ef88d679cd4702623a0a0f1e59f5f
-
SHA512
375c5122bbb911df1f44f4c64179793a6c9b09362abe42094502ed3822f570b481d0c9fc326a62a9d123701ffe47cec7ffe7c9974b0b9aa39e6493a5cf4a7d37
-
SSDEEP
1536:NrOpgTYOvG6t4jfHj/Hm8OhYoSIWd9NF52SyBm9j3X8y2lU5tdrEgEemvb:FOpgBL4DDvQ1WdTFfxpX8yigEemvb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0cdd91b160ccac0785e490048190912_JaffaCakes118
Files
-
b0cdd91b160ccac0785e490048190912_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rscr Size: 512B - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ