Static task
static1
Behavioral task
behavioral1
Sample
b3cebcd5cb0f0b4e98c06cf69b6613fd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b3cebcd5cb0f0b4e98c06cf69b6613fd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3cebcd5cb0f0b4e98c06cf69b6613fd_JaffaCakes118
-
Size
148KB
-
MD5
b3cebcd5cb0f0b4e98c06cf69b6613fd
-
SHA1
be2f94986c1053016aefe8684577210d78e65c18
-
SHA256
5ff7672be3f13973fb1eaafbbd62f3678636e28cd896852ee6713374bc475f9a
-
SHA512
70264b162f5dede92bc9ea739c7386c69b0a0cb2847e0c62ea3d2620544b344892c8bdd4769e0ef5d4b67b365bff12a148bb5751bedad9841722ca658721f348
-
SSDEEP
3072:g5BuV7IR+H7p+bYqTO5+wm8FN+pfx2cTrGSOMPyP:g5CtH77qL8oNIMPs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3cebcd5cb0f0b4e98c06cf69b6613fd_JaffaCakes118
Files
-
b3cebcd5cb0f0b4e98c06cf69b6613fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
import Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data Size: 40KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE