Static task
static1
Behavioral task
behavioral1
Sample
b55b33a48259a14d5265c14e732fd78f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b55b33a48259a14d5265c14e732fd78f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b55b33a48259a14d5265c14e732fd78f_JaffaCakes118
-
Size
156KB
-
MD5
b55b33a48259a14d5265c14e732fd78f
-
SHA1
1839a4aa4d23b1ebc330cb7cd6b3c4673466da88
-
SHA256
3695b07ac25bdfad6fa3f07f4b02e36d062d1c43cf7c5d21aa163ffecbc971cb
-
SHA512
b1f077aa5453fbffc7978e132383aab4b74ad694455b412ea5d42cd955eaad03779ba8420826e3d81b54c06731b83f19131d31102e7d577f344244df93b6e13c
-
SSDEEP
3072:iWNjTeQXmJZfw3WOJujGBEc5TeWQz4X4EQiF5C9cAB1S3sdMml1xI:fYZ4rjB5T1Qz4X4E9F5ABL1xI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b55b33a48259a14d5265c14e732fd78f_JaffaCakes118
Files
-
b55b33a48259a14d5265c14e732fd78f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ynOHtV Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8MI Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Vr Size: 124KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE