Static task
static1
Behavioral task
behavioral1
Sample
b3b157d4102e0496687ad7a6aeb2405d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3b157d4102e0496687ad7a6aeb2405d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3b157d4102e0496687ad7a6aeb2405d_JaffaCakes118
-
Size
87KB
-
MD5
b3b157d4102e0496687ad7a6aeb2405d
-
SHA1
85c2c938ebb2460d0b7fb82353a785f0051f71cd
-
SHA256
67e6a3270b7898a33e4eb0d0d9c49c87533ae5b883b80d2b7b4be97bf61557f3
-
SHA512
be3ab94fff229902b836c22cfe77bfb6feedb8ce68b6d945cd5342cda1cc6a16e5a86ff69305061672ac49582893af9b6dd17e399f0c48e9d3cfd5616feccb3c
-
SSDEEP
1536:sKFK0Kt11M4u+dRXpSviOpCegNifwka2e+2+Is/h0lxw2hi8Nvg:sK8Nn3RXpsiOpnWiIkazJ+Is50lMGY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3b157d4102e0496687ad7a6aeb2405d_JaffaCakes118
Files
-
b3b157d4102e0496687ad7a6aeb2405d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
2zgt0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2zgt1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2zgt2 Size: 165B - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE