Static task
static1
Behavioral task
behavioral1
Sample
b311f81286f19e8edaf468d40fb7e70f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b311f81286f19e8edaf468d40fb7e70f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b311f81286f19e8edaf468d40fb7e70f_JaffaCakes118
-
Size
362KB
-
MD5
b311f81286f19e8edaf468d40fb7e70f
-
SHA1
4dbde1f1f0924d58e8ed513a9ab8b08357fc1d47
-
SHA256
848c5a82ce41e5c3cdf3bd387c01185173c7955d4cd7508df8d49f46c121c622
-
SHA512
5c04fc4a84c20ac5be72506147498c50c60f42e2cc5fc54b56dce437ca70dfa574df49fd14a01b6d26761f57f1400e90fbfcde1a327528e78d20dc495ac6e43f
-
SSDEEP
6144:KxX+WrRwl2yta7EDcsuXUykDUM6kunFAWJx6iB0/GvUTc72ffbR57f:owlVrLuKDUnkuaWJ07i2ft57
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b311f81286f19e8edaf468d40fb7e70f_JaffaCakes118
Files
-
b311f81286f19e8edaf468d40fb7e70f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 476KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE