Static task
static1
Behavioral task
behavioral1
Sample
b2dc9702de11be82bd87ea1170fba442_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b2dc9702de11be82bd87ea1170fba442_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2dc9702de11be82bd87ea1170fba442_JaffaCakes118
-
Size
71KB
-
MD5
b2dc9702de11be82bd87ea1170fba442
-
SHA1
f56e91f9cdf0af4066bb98dedcfe974888ffc255
-
SHA256
9c9e95577c8ddc05b8c00776d9f5e55ba747a0d0b31eead7a4b2b35445f5ce81
-
SHA512
afd059d66b2a018d1332cba328aaee5c27260d31cc0db31bd6da172059433e7eec17582b409c9bbaef24eae94a75376a3d3a8c3335ce23c21d72428436452ee8
-
SSDEEP
1536:Ebo31MgXzVnauy9y6J+si8uvoP/r4e5J73T8DACSDBJhs:EgMg5nSy6DPuvoP/r4e5dTImrhs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2dc9702de11be82bd87ea1170fba442_JaffaCakes118
Files
-
b2dc9702de11be82bd87ea1170fba442_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
kdwr0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kdwr1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kdwr2 Size: 833B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE