Static task
static1
Behavioral task
behavioral1
Sample
b1f5cb2e1725fe5bd10c4c5f26352bfb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b1f5cb2e1725fe5bd10c4c5f26352bfb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1f5cb2e1725fe5bd10c4c5f26352bfb_JaffaCakes118
-
Size
51KB
-
MD5
b1f5cb2e1725fe5bd10c4c5f26352bfb
-
SHA1
6969d4cc93ca8de31e178e4d33968505e62d0fbb
-
SHA256
eb944f38169a43445f26dae25045813c7728b2666bdfe9b5bc9abe522b3d5764
-
SHA512
be033abf8822e12099449c7782d905c75432a953aaf35e63ff907a807c6a3af91384919b049f1ae278c8c99cedcdfdc1a5f2d1a19b8d9c8f4727cb7f370b3ca2
-
SSDEEP
1536:SXkz7cA/CJPNBtGej53/KCYHL3RiAfLi7aKYYPWTt:SC7bMXN3/VGfLi5nWTt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1f5cb2e1725fe5bd10c4c5f26352bfb_JaffaCakes118
Files
-
b1f5cb2e1725fe5bd10c4c5f26352bfb_JaffaCakes118.exe windows:4 windows x86 arch:x86
b5c0892fa36495b498d09f7c10228f02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
Sections
.text Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ