Static task
static1
Behavioral task
behavioral1
Sample
b97a64749f5d2e72d574081553d3fb48_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b97a64749f5d2e72d574081553d3fb48_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b97a64749f5d2e72d574081553d3fb48_JaffaCakes118
-
Size
541KB
-
MD5
b97a64749f5d2e72d574081553d3fb48
-
SHA1
d8625fae86793eae29f21c9912cab1287e437674
-
SHA256
146b64d2c578d5d61033516d58fe43482ce927e8825e31cce4e2e195933af2f5
-
SHA512
5a527729fbd7f84214ad0c4686043dcc9823104558e9b798b0ed6763737d28ec4dbb79d94104622336758d105a4e35983609669cbb9751f863bb3db98f4a4ce8
-
SSDEEP
12288:GEeThKaR/xT6DvdOWQmAwiuEnVbCUm8m8d1c2obY7rwRBFvEYBg15I7:GvTvpTWvdDowwCv0ocnwRBVEY4I7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b97a64749f5d2e72d574081553d3fb48_JaffaCakes118
Files
-
b97a64749f5d2e72d574081553d3fb48_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 269KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 261KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE