Static task
static1
Behavioral task
behavioral1
Sample
b5707889864471438a400cd1604763f0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b5707889864471438a400cd1604763f0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b5707889864471438a400cd1604763f0_JaffaCakes118
-
Size
284KB
-
MD5
b5707889864471438a400cd1604763f0
-
SHA1
4f8cb1bfe2118f1059555d6f60b0c37b34329deb
-
SHA256
1ab24cea98dfcd413ff8712aab2b6490953b18ff8848bedc81018cff3431125f
-
SHA512
c4d85959bb129a8c4408104b88d9a44213b9a88f72b1a248f82863cf487c1bcb6d060d6807502370c1e6f7186781e5fcd0c97b58ef4f3972c9fd344ac58ffd45
-
SSDEEP
6144:/xrEmcTGAdTulF59LooSF/0VqsInWRS1+ZShfzgdFY:+sFF59L1SF/Wqj+Shfz9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5707889864471438a400cd1604763f0_JaffaCakes118
Files
-
b5707889864471438a400cd1604763f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE