Static task
static1
Behavioral task
behavioral1
Sample
b3bc81960be39d379eb2a0e94219ab72_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3bc81960be39d379eb2a0e94219ab72_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3bc81960be39d379eb2a0e94219ab72_JaffaCakes118
-
Size
88KB
-
MD5
b3bc81960be39d379eb2a0e94219ab72
-
SHA1
328d4c1ee93e1e09bfccc985ce9556f16cd8866f
-
SHA256
ec6683a252b62464205a66b65b628c8d1271c0d138d14a72a0bd18fcdc39a139
-
SHA512
38c59fb8b86163659752d20c2e0a4a7b635de55d0aaae3ef9215461a01ad5dbb6deb07163fd31c09b42db21dc8420a782d2ed4a8851a43f63f6debcc0217447c
-
SSDEEP
1536:Ygzn/pmIGx9+sk/isqIx6+EK9CGnVSzFidTsJs1XS1zOgLWwsWk985DuAd1WaEZw:Ya/paHk7pEiVSzMsJs1XS1zOgLWwsWkM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3bc81960be39d379eb2a0e94219ab72_JaffaCakes118
Files
-
b3bc81960be39d379eb2a0e94219ab72_JaffaCakes118.exe .vbs windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ