Static task
static1
Behavioral task
behavioral1
Sample
b372b443946ce03ccc295a912f1d78d9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b372b443946ce03ccc295a912f1d78d9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b372b443946ce03ccc295a912f1d78d9_JaffaCakes118
-
Size
357KB
-
MD5
b372b443946ce03ccc295a912f1d78d9
-
SHA1
19e7eed99aa5b11bc8552de0a3b9511a2a503151
-
SHA256
ddcfca48cf8e3d2d095082186ef2594f18f51458e2f2ef275c65739311ebe8fb
-
SHA512
9418e0cf70b70c2fcb1949b7000bb622d3e3a3aa90103a5c6d806d1ee6dc50d507046d7bea72785d88da1f0c4393154614364a7d8cbe06b40d345b9fefd2f2ed
-
SSDEEP
6144:m8cYvWZI2LKl8yM6eVtNEJQVVZ9eVV5AQxiyJMIsYlm+5p95iy5Ys6F:quuI2G8yiNVVVZ9GbLsYlmWpjbA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b372b443946ce03ccc295a912f1d78d9_JaffaCakes118
Files
-
b372b443946ce03ccc295a912f1d78d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 957B - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.null Size: - Virtual size: 3.0MB
.rdata Size: - Virtual size: 452KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.packed Size: 332KB - Virtual size: 336KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 923B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE