Static task
static1
Behavioral task
behavioral1
Sample
b1664a3998155503b213b1917cb287f4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b1664a3998155503b213b1917cb287f4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1664a3998155503b213b1917cb287f4_JaffaCakes118
-
Size
136KB
-
MD5
b1664a3998155503b213b1917cb287f4
-
SHA1
fb4e52cdcd37d7153843a21d00db345a7adf72f9
-
SHA256
a1e511030046bd784a07f5be5b6d211a9d8069cac0ca2a49ddd7e95958da90d3
-
SHA512
ef6b741029e396186bfc4f0756706574f97fdddbed4f03764cc0eaa9489a30daebb6d40e6c8a01625d60ea2eeb15f1fd2b30864b98816659b1862a66fbec00ed
-
SSDEEP
3072:QtVcgz4HE4gu4+4C8EEIbXys/qCrXEV7ixHsMOwoVWsOwk7Que:RhH+u+cdrUVOTOtVz1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1664a3998155503b213b1917cb287f4_JaffaCakes118
Files
-
b1664a3998155503b213b1917cb287f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bad0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bad1 Size: 132KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bad2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bad0 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ