Static task
static1
Behavioral task
behavioral1
Sample
b174d3ec38b3078d3e1ebb0c48813a9e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b174d3ec38b3078d3e1ebb0c48813a9e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b174d3ec38b3078d3e1ebb0c48813a9e_JaffaCakes118
-
Size
110KB
-
MD5
b174d3ec38b3078d3e1ebb0c48813a9e
-
SHA1
c81ab02a616b5fae17ba17372a1f1e177d3d0b89
-
SHA256
e3c12228fbadca8fc7ff46d8bccafad6e099e7fe8fc206173b2215874ee460d2
-
SHA512
ce90ac626197d14f591a5a132a427b93bb3eb895294cdb9e30d2ef268a65ab64e8742b4442a4073a980a5e97922c2f8d402f81f86543a6148279db0c5f88dc83
-
SSDEEP
3072:1vEKR5R9TTJphueT2+Sx3XtZxc5UDmr3jT0N+zwkVRwm5kO83edeQH9:1vEKR5R9TTJp0eT2+Sx3XtZxcKDmr3jL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b174d3ec38b3078d3e1ebb0c48813a9e_JaffaCakes118
Files
-
b174d3ec38b3078d3e1ebb0c48813a9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 269B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 906B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 86B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ