Static task
static1
Behavioral task
behavioral1
Sample
b508add4978efcbab52287f50eceaf2b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b508add4978efcbab52287f50eceaf2b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b508add4978efcbab52287f50eceaf2b_JaffaCakes118
-
Size
216KB
-
MD5
b508add4978efcbab52287f50eceaf2b
-
SHA1
6867ce63ab90e5db9ff04ff5b74378c87eea860d
-
SHA256
1693ff529bcfd882ee779c6643fa31340ade4b18133ce4144c88785064de3ec4
-
SHA512
7d61ac9da16a642499335138f92565ee35a9f5a0c9f4aa2dbfc6846cf14572f5dccd25ed8e9c6f381ca2a902bbc20382f00e25628bde41d165ddde8e3804f50f
-
SSDEEP
3072:eB+2K2Qsr3qopZ2ejcVqtQs7u1f5vAlssRaA+dRB8W6MLs:c+23rqoGcXtQs7u1f5vAlsU+dRp6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b508add4978efcbab52287f50eceaf2b_JaffaCakes118
Files
-
b508add4978efcbab52287f50eceaf2b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 124KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ