Static task
static1
Behavioral task
behavioral1
Sample
b373abfe7ee4b99624e7778199e96104_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b373abfe7ee4b99624e7778199e96104_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b373abfe7ee4b99624e7778199e96104_JaffaCakes118
-
Size
286KB
-
MD5
b373abfe7ee4b99624e7778199e96104
-
SHA1
5054520b61e2c09035496ea09bb6de40dad5de42
-
SHA256
3bd046067eb34b8f4f22905a294db467f8e09d974853bcf7441d19ca8398f9db
-
SHA512
e516362d6abc08376518f3afde51dbb16d8dc3398fa20e19a3df33f7537a037d77a60fce3261a5324c51b4fbe73ec5ad60357485b5178ffa7af3ff623abe05fb
-
SSDEEP
6144:FtWZDWD+iLn1Lc+Bb8HlMiACKjmtOKKKMN8yE9:/WZDWDW+b8uiAnqnMyyE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b373abfe7ee4b99624e7778199e96104_JaffaCakes118
Files
-
b373abfe7ee4b99624e7778199e96104_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 202KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ