Static task
static1
Behavioral task
behavioral1
Sample
b233cf1308ef4b303f1187fa766cab52_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b233cf1308ef4b303f1187fa766cab52_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b233cf1308ef4b303f1187fa766cab52_JaffaCakes118
-
Size
19KB
-
MD5
b233cf1308ef4b303f1187fa766cab52
-
SHA1
816f5c2f89add158c61f1eefc515d1c6d4351f04
-
SHA256
0bb878a52e728212d2edca5592db2731fe0e30d005fe416f0f702338f47344d5
-
SHA512
628775022e27474a62c5825bc0929c2a46a225a3d9d9ca0e319b81f5e3c495ee25c6eedf7103cfe7856188712b5c45a3fe06c87a3105c402a6992186c64d86eb
-
SSDEEP
24:eFGSujulXviPeMoqMu8EDHF82XFsgd+cQ5/j2Lx0QeeePLesLMeZdixeGBLeeevg:iYulXGe3mGoWdzr2LF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b233cf1308ef4b303f1187fa766cab52_JaffaCakes118
Files
-
b233cf1308ef4b303f1187fa766cab52_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 208KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ