Static task
static1
Behavioral task
behavioral1
Sample
b56dccf03ca0e75abd53b98694f95d9e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b56dccf03ca0e75abd53b98694f95d9e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b56dccf03ca0e75abd53b98694f95d9e_JaffaCakes118
-
Size
40KB
-
MD5
b56dccf03ca0e75abd53b98694f95d9e
-
SHA1
babd8cb08b291410f44f7811c5b7fe69a4291b08
-
SHA256
df944abf65c49da607695ad391c9c6c3e0caf86d56cd8826115643eff7dfc1af
-
SHA512
b5e2093a38cfb57666ba9c78cf90a97f6f845a784d556d3da5464ba17d0f3c80ab7d2980f19765f7fe8cca2d87c7296e5310a0a3e3583798f13746d4b4ed9abe
-
SSDEEP
768:EuxrU/v0CUTg4B8gxm5+GzSORDkO5DOPIFDN1hWfamGI1xI9:EuQMsGMUPWN1heae1u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b56dccf03ca0e75abd53b98694f95d9e_JaffaCakes118
Files
-
b56dccf03ca0e75abd53b98694f95d9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE