Static task
static1
Behavioral task
behavioral1
Sample
b1c1cd81a3a995ace7b58b2ef11a8caa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b1c1cd81a3a995ace7b58b2ef11a8caa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1c1cd81a3a995ace7b58b2ef11a8caa_JaffaCakes118
-
Size
3.4MB
-
MD5
b1c1cd81a3a995ace7b58b2ef11a8caa
-
SHA1
5cab15cf10e3bb635097e36d65f9de7bcd5f9758
-
SHA256
cfd8364fca1be5b9833bfa479887d6478848a7393dfd2f235506b1144a43d12d
-
SHA512
765afe420ae69675a088f71688a21f7ab779aaf4fb207f8751fb7ecedc9d6a0650a439e8aab67a95d8a46dcafa2a97188c6c6e7f0cb17f4e2207f59358c98952
-
SSDEEP
98304:RXCv2lTTSVHYI23uwQKOlia5I06y57nZiR0YlECv:EusYd7ulfu7y57nZiRrl3v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1c1cd81a3a995ace7b58b2ef11a8caa_JaffaCakes118
Files
-
b1c1cd81a3a995ace7b58b2ef11a8caa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
packerBY Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE