Static task
static1
Behavioral task
behavioral1
Sample
b3a1f8b26493f86ff03fe934f752df2e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b3a1f8b26493f86ff03fe934f752df2e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3a1f8b26493f86ff03fe934f752df2e_JaffaCakes118
-
Size
173KB
-
MD5
b3a1f8b26493f86ff03fe934f752df2e
-
SHA1
01658caa397694e27e016a5d735fb44bd0402c18
-
SHA256
15c5773650260a4e6815df98997834c8089d76e101dac60af2494359c0db6990
-
SHA512
96ae3b763f36c35153e1264eaa46f704d6041fbe18ddcebbcc4ac943697b26f453c3da5c2fa9e93b465f6f37dcfb56989b0d570d9a828339ce514b6bccb900df
-
SSDEEP
3072:LnNMHTNs68dqkinkE8aC4Eiz1DWGz7zhoilRtG8uM8vpzdZY3McifA:TNMHh+d9ikELEizEuzhXztkM8hzRffA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3a1f8b26493f86ff03fe934f752df2e_JaffaCakes118
Files
-
b3a1f8b26493f86ff03fe934f752df2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE