Static task
static1
Behavioral task
behavioral1
Sample
b2bd87b4de5bd23d1477b60c61a66541_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b2bd87b4de5bd23d1477b60c61a66541_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2bd87b4de5bd23d1477b60c61a66541_JaffaCakes118
-
Size
154KB
-
MD5
b2bd87b4de5bd23d1477b60c61a66541
-
SHA1
e3b81638a92e5c9de4408b87441ed8031e710f83
-
SHA256
228340d67b3909a6f8ceccf562930d36426c9317659c06308225491498a2c9d6
-
SHA512
fb29aa6689ce326fbc81310b268b94f4fce68edd99955d853d99bf5b0a10918dce7b6c56e4d5019168ca0e53f45546ef3fad7c6dc35b70ebe20a17c11ce1c977
-
SSDEEP
3072:51B31bdBob2QXb8ukzgkVVic9uD36a7Yii06QUbuByx:5731bdBaBoHEkXs36a8ii063CAx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2bd87b4de5bd23d1477b60c61a66541_JaffaCakes118
Files
-
b2bd87b4de5bd23d1477b60c61a66541_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ