Static task
static1
Behavioral task
behavioral1
Sample
b3e4598abf8c1171987e543003a81aa1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3e4598abf8c1171987e543003a81aa1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3e4598abf8c1171987e543003a81aa1_JaffaCakes118
-
Size
6KB
-
MD5
b3e4598abf8c1171987e543003a81aa1
-
SHA1
9bd7d95319098a3a773c1d3417407f2e40e987e9
-
SHA256
aecab4843890db23ce92d57617e7f4dfcc52f750ddc69a2443c14ccccaac162c
-
SHA512
37fd3225be6cd99ed094f7ef2143b9b222ab0247e5740ab8f7fab2ba2ba9a767428d6e2616dc2b538eb689dcf5a9301e5848df0253bc8c9670734a2b1a9bebc6
-
SSDEEP
48:iDAL8NI3zK0/EjzqwA53r3Wh1+hOn3+EIQrfcbMO021OodvENVzmJ5JOrLv/gzoK:bQ2jKHjzqwABD83+VQ6MM1OTzZv/l8F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3e4598abf8c1171987e543003a81aa1_JaffaCakes118
Files
-
b3e4598abf8c1171987e543003a81aa1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 152KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ