Static task
static1
Behavioral task
behavioral1
Sample
b3f162ee48939f0b86f0eff2e59bbe73_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3f162ee48939f0b86f0eff2e59bbe73_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3f162ee48939f0b86f0eff2e59bbe73_JaffaCakes118
-
Size
1.3MB
-
MD5
b3f162ee48939f0b86f0eff2e59bbe73
-
SHA1
1d213a859b6403418b0a6af0b8e89e654b81fb7b
-
SHA256
dbc673b7a5f8ede59ab2441935ad780a1b3bf2b66600ff86e94447ae678f020a
-
SHA512
f201138a3de39d4976fc21a3f9b5ed7ffceba76d01883bbf4293738ecc5fa0a3c3767336cd0f6f441ac46e04f827ed1b098885bab87bb16c781b9f3158363066
-
SSDEEP
24576:r1OLXUkuTA5HBZHTdLR0CrtT09oH7WBvLicLhCUpwMcqEEbxE8/2/eP420Iyx0mq:2XsT4ZHRV0wtT0wWOUFcqEt8e2Kx0Vgu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3f162ee48939f0b86f0eff2e59bbe73_JaffaCakes118
Files
-
b3f162ee48939f0b86f0eff2e59bbe73_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.nfJBg86 Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nfJBg86 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE