Static task
static1
Behavioral task
behavioral1
Sample
b1c88a39b5b9dc3a4da94ae51be76362_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b1c88a39b5b9dc3a4da94ae51be76362_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1c88a39b5b9dc3a4da94ae51be76362_JaffaCakes118
-
Size
288KB
-
MD5
b1c88a39b5b9dc3a4da94ae51be76362
-
SHA1
656b2bc9c9ed4b77ee0765493b9c323c4e871b0f
-
SHA256
c1637ec133bc913ced6bc050e6072e641747e344127a929394279ee1394dd323
-
SHA512
0dbc18f174caac25cced5d0b570e36991d93ed156e179333f6b1e887c9ee858831b022a8774a8a7fa6f1a41ed0d02df2003242344dade0edfb01f85bcb55bc3c
-
SSDEEP
6144:/xrEmcTGAdTulF59LooSF/0VqsInWDSzkNiREpKgfgz8mSY4:+sFF59L1SF/WqjPEpKkE4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1c88a39b5b9dc3a4da94ae51be76362_JaffaCakes118
Files
-
b1c88a39b5b9dc3a4da94ae51be76362_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE