Static task
static1
Behavioral task
behavioral1
Sample
b4a309977149db9c638d217a50fe23d1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b4a309977149db9c638d217a50fe23d1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b4a309977149db9c638d217a50fe23d1_JaffaCakes118
-
Size
12KB
-
MD5
b4a309977149db9c638d217a50fe23d1
-
SHA1
eef4086966cdd4c5267d9cdea83ab66642f30b69
-
SHA256
13b59e9816106b96275c2a223b16fbc248fc1c35f855e21d27e0a719cb4576a0
-
SHA512
711f91b37d8d615a47ac7040ec75ade1620a4ca3c1b513fc8481d27f43c757791a612af0d1dc305aec9643b81cc5941c57fc8fc21e2f6679d017a06f2e8e4084
-
SSDEEP
192:QinznA3W4mtor2DnDqcpNSjfWCPuugIZSMMM3oBGj+3tq:HnzAJwor+DqaN0WCmugJhM316s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4a309977149db9c638d217a50fe23d1_JaffaCakes118
Files
-
b4a309977149db9c638d217a50fe23d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dret Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2.9MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 592KB - Virtual size: 592KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE