Static task
static1
Behavioral task
behavioral1
Sample
b4a84f8faf451b21ebd373cd78fcf7aa_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b4a84f8faf451b21ebd373cd78fcf7aa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b4a84f8faf451b21ebd373cd78fcf7aa_JaffaCakes118
-
Size
177KB
-
MD5
b4a84f8faf451b21ebd373cd78fcf7aa
-
SHA1
cd9558c39255541528a6e9c35a2ef5be7fa9cf6c
-
SHA256
0bfa7b4d66b54bad744971dfd8d02d9795f0880dbe36f8865a3aa00d7651da88
-
SHA512
de69dfbef092614287cf73f4cde1dfd56122adfb3fab17a3b0417b7b5bb0e449f699b27e10e94e9d9d634949522df9422ef3ead677a872f12a5b6f22b1d03943
-
SSDEEP
3072:lkZyTLvqlp9rMoxs/LtScXfu028/L1RA:lX2p9rMoxsJ7u02
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4a84f8faf451b21ebd373cd78fcf7aa_JaffaCakes118
Files
-
b4a84f8faf451b21ebd373cd78fcf7aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 74KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE