Static task
static1
Behavioral task
behavioral1
Sample
b1a46ac01a2c837a6e422741f7f4e3dc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b1a46ac01a2c837a6e422741f7f4e3dc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1a46ac01a2c837a6e422741f7f4e3dc_JaffaCakes118
-
Size
2.5MB
-
MD5
b1a46ac01a2c837a6e422741f7f4e3dc
-
SHA1
1cdbe8d76a4201eab5b1f3853f0c494227d2e725
-
SHA256
1bd58e2deb5c96919f725551c594e5b1fc4f4a69e0be9b802d006f465ab7d511
-
SHA512
772ade96a25848ba1c5bd3e3c984616f0761bbc9a66f6f4af930e6de3a12b42c239fa5165b0628f632a7e216724ccea0ed78e38e2eacb51a9cf23c65fb736f0c
-
SSDEEP
49152:dZcMruw4HCKVcbk82C4QerwF4AXC1pil8AJNPYPQcoaGuweR46d2IW0:jcMru7zKbk8UlAXC1Q9JNQYcHQJ6d2Ij
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1a46ac01a2c837a6e422741f7f4e3dc_JaffaCakes118
Files
-
b1a46ac01a2c837a6e422741f7f4e3dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_READ
VProtect Size: 260KB - Virtual size: 260KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ