Static task
static1
Behavioral task
behavioral1
Sample
b3c47f99b8ef08b4b19fd50b64aa29db_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3c47f99b8ef08b4b19fd50b64aa29db_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3c47f99b8ef08b4b19fd50b64aa29db_JaffaCakes118
-
Size
122KB
-
MD5
b3c47f99b8ef08b4b19fd50b64aa29db
-
SHA1
4fa951b672fd10c99a3e0978054892a562496b60
-
SHA256
5734161614cf312e8131daeffb9c478f49902351d00e130978da7586399cb1ab
-
SHA512
1aad7cffb3770de78d61c5701bd9ec965795d073701557279c7333ec77ce793f291d37de1f97af1b78b7adb2952d49c5055bde63c657bc9e7f38121730963708
-
SSDEEP
1536:9oUEbIXDW2C9QprCysc4o3x0/rZQt5qZtMEAmV1DExMUBL7Y+nTGRs1LbQZ2FW4e:/s92CStd4ux0/rZ8/mV18ZA+WgQZF7KI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3c47f99b8ef08b4b19fd50b64aa29db_JaffaCakes118
Files
-
b3c47f99b8ef08b4b19fd50b64aa29db_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 419B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE