Static task
static1
Behavioral task
behavioral1
Sample
b1c3d865cf97bbba2db152cc9aa38256_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b1c3d865cf97bbba2db152cc9aa38256_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1c3d865cf97bbba2db152cc9aa38256_JaffaCakes118
-
Size
202KB
-
MD5
b1c3d865cf97bbba2db152cc9aa38256
-
SHA1
291b7f48757249e10cf0a7ae61d0d73b20511926
-
SHA256
c6ec24ad9dde597914e1a5829ab11304b7e8a11487de86496b72ec83e681dafe
-
SHA512
3be64cb573651c7be305fde06bd14de4e87149b8a474e6b126d69960cabf0b09598de2323d62e27c095ca15153383bdd2dc99364dd2826209e579618f2d659b5
-
SSDEEP
6144:OorQEB74KznrNP8x2dH++8KchCjCpnAtE:OocEB7PzrNUx2N++8KZWuE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1c3d865cf97bbba2db152cc9aa38256_JaffaCakes118
Files
-
b1c3d865cf97bbba2db152cc9aa38256_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
vz57 Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YSPjd40I Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE