Static task
static1
Behavioral task
behavioral1
Sample
b354b1e221a83c06c5676742be2cbdc4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b354b1e221a83c06c5676742be2cbdc4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b354b1e221a83c06c5676742be2cbdc4_JaffaCakes118
-
Size
276KB
-
MD5
b354b1e221a83c06c5676742be2cbdc4
-
SHA1
756370c807107722f7929c2495e500ecd2d0568b
-
SHA256
d6243533c5b4dd786bbc64cae68c1be673cd7548b5948eea1bffdfbf3bfee921
-
SHA512
9ff61c7ac9be08fc718194462aea2db7fe7110f81ff54fe1085d789cb85fc09d8590da5cf9219ea8b8fcddb0cdf159265f2a1d2a13467e1836a1975576e5de80
-
SSDEEP
6144:T8MDy+Glv7HUEaXlrqq4NkFGGHCCTReIZRSiX5kTUhBi2EO:T0770XlIkFrCCTRDvt5kQh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b354b1e221a83c06c5676742be2cbdc4_JaffaCakes118
Files
-
b354b1e221a83c06c5676742be2cbdc4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 268KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ