Static task
static1
Behavioral task
behavioral1
Sample
b1764065866f8c00f6196941714c4db2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b1764065866f8c00f6196941714c4db2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1764065866f8c00f6196941714c4db2_JaffaCakes118
-
Size
212KB
-
MD5
b1764065866f8c00f6196941714c4db2
-
SHA1
503df6fa647c41afe4350f55861c39560d3f7ae3
-
SHA256
8ae07993f3a7dfd18b5ed890838544dbb9f8dd5c27da68eed8277c2b80716b2d
-
SHA512
90776a2a8d219e7911f3651c860630884332ef3d6140a8bd24feb20a42bdbfb277c8a3de53aa16eaba00437103a5970f8b1dcb2ef835630070015748742a2fe3
-
SSDEEP
3072:kyni2Hp/IDy20zbRWix1+IhR8bv43jRijj5:kyn7p/Oy2SRWi2Dv43jRYj5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1764065866f8c00f6196941714c4db2_JaffaCakes118
Files
-
b1764065866f8c00f6196941714c4db2_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 349B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 190KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ