Static task
static1
Behavioral task
behavioral1
Sample
b4b4561c66ed67957e0ae2cbef000c03_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b4b4561c66ed67957e0ae2cbef000c03_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b4b4561c66ed67957e0ae2cbef000c03_JaffaCakes118
-
Size
103KB
-
MD5
b4b4561c66ed67957e0ae2cbef000c03
-
SHA1
8e25e9a12ef9bc282d1a52acc2e20e46f0e07c3e
-
SHA256
42aa4c1aaaa499086f4d64ed6fe0b9df85fe9dbfec15eacd9236edc42088c98a
-
SHA512
6f008f39e83541716c2fe0b65a441e2845a86b400cefdd5904771b79fe15b4f1a802397f144704f1d4ed2507d95c29cada86d7cc9bfe6eb562295fd4d21a5fee
-
SSDEEP
1536:EIJUwLqdbGP4czakStzmTPi0Ak2VKWIwXW/Fuf7f7CvoWhp3unSP:EIOwL2bw4czpPiVVbIbkf7f7UhpenSP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4b4561c66ed67957e0ae2cbef000c03_JaffaCakes118
Files
-
b4b4561c66ed67957e0ae2cbef000c03_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 715B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ