Static task
static1
Behavioral task
behavioral1
Sample
b342201a3424ffc959a6e223ff7ca0cb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b342201a3424ffc959a6e223ff7ca0cb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b342201a3424ffc959a6e223ff7ca0cb_JaffaCakes118
-
Size
561KB
-
MD5
b342201a3424ffc959a6e223ff7ca0cb
-
SHA1
38a6c1883ae3055c0ed2b108a3b9632250558474
-
SHA256
eae9c86319510c6776923188cb715a64c13b2ccd3db98925d96779cda9079c06
-
SHA512
3d15eee41989ec53a4d28920463ca223ed49252e3a237b826f0bb2cf093a6b10d138a367b2fd266822c5a60447dcf0e334b0e5e8d1ef5a7f73c12797b0492557
-
SSDEEP
12288:+K/ymss7pKQP6rJsQlApgAHK62PcFcLfeiH:dqLs7ZP6rJscbAHikcLm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b342201a3424ffc959a6e223ff7ca0cb_JaffaCakes118
Files
-
b342201a3424ffc959a6e223ff7ca0cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 472KB - Virtual size: 471KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ