Static task
static1
Behavioral task
behavioral1
Sample
b280be6d667f33279e349a7207fc5b4e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b280be6d667f33279e349a7207fc5b4e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b280be6d667f33279e349a7207fc5b4e_JaffaCakes118
-
Size
311KB
-
MD5
b280be6d667f33279e349a7207fc5b4e
-
SHA1
24f3f3bf8dc220cd2bc0c9f360fd9ff55398df86
-
SHA256
bbd5650f67a40bf4c35b57bfe0427cf23a54189817699c1584b859294de29d89
-
SHA512
1528a872d2f1178e8416685371ccff1d04e3081e7193242871ee12cab5f663e301c71ec05934158a74589ddb7d7543ef5a8e743cf9c710a1cfd4daa20094a19d
-
SSDEEP
6144:2m+2EnLu6j1Rk14nDWgRAkPDkhGQn8xID0DMF6BsuhQPvY3BYPHNoRwayTES:2rLdj1RjR3PDkhGLxe0DlsxPvY3BSNo+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b280be6d667f33279e349a7207fc5b4e_JaffaCakes118
Files
-
b280be6d667f33279e349a7207fc5b4e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
gvoF6w2o Size: - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MjZSKDx4 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
yg8Z4962 Size: 304KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4vq57BFu Size: 376B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
URkgGbpP Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Cb7GZe4D Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hk546Q43 Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ