Static task
static1
Behavioral task
behavioral1
Sample
b237475e027c9ac1ddf8289042b73401_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b237475e027c9ac1ddf8289042b73401_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b237475e027c9ac1ddf8289042b73401_JaffaCakes118
-
Size
143KB
-
MD5
b237475e027c9ac1ddf8289042b73401
-
SHA1
5b976b82e5428428da4f8be36d03d0d7e791f9fd
-
SHA256
f59147c6e39e5d4746643b97c7cd98109a7875649a7c941268720186ac5f93ba
-
SHA512
791789bfdc0da5a97f24756ae559cdfe7acba90aa8741e8549923cfcf424201437cec2f679882bf0c7fd3a0cbadb36facb4379694337e48343776c72d3a4c41f
-
SSDEEP
768:MoIGTqRX9xjRM3J6lfDTV/Vofe7UFX7wD58FisiTPhTh2TPhThcowoS3GCUeLkYh:oPL2ihymq+TZToTZTsqeLLeLF6E9M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b237475e027c9ac1ddf8289042b73401_JaffaCakes118
Files
-
b237475e027c9ac1ddf8289042b73401_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ