Static task
static1
Behavioral task
behavioral1
Sample
b56da300891ac361988e91215f245b57_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b56da300891ac361988e91215f245b57_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b56da300891ac361988e91215f245b57_JaffaCakes118
-
Size
97KB
-
MD5
b56da300891ac361988e91215f245b57
-
SHA1
4307878d0ea5b294d834f34d48e1b59cd19ec025
-
SHA256
55770f13fdedfd421ea8479e98a747159d2488376de201e7dafa8fb44ac06362
-
SHA512
67402e83faddcccd5655a457f018409b2273a1f56fc83cb73db5888366c728a10f101a68f1c6d6742f3c1d2a5ae075386c95619d0afb0e878cdcc78e3bb6b000
-
SSDEEP
3072:rqwPl6BJdnNcdxtIoBXGiuirNX7ZGLx3inV:rnWjs3BdtGYV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b56da300891ac361988e91215f245b57_JaffaCakes118
Files
-
b56da300891ac361988e91215f245b57_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
x�i����r Size: - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��֢?/�w Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0Y��ZE?? Size: 184KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�Vk ��$p Size: 268B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
?�����d� Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
{?=?[?� Size: 28B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ