Static task
static1
Behavioral task
behavioral1
Sample
b97c0b3bce6f218855401663c05ceead_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b97c0b3bce6f218855401663c05ceead_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b97c0b3bce6f218855401663c05ceead_JaffaCakes118
-
Size
259KB
-
MD5
b97c0b3bce6f218855401663c05ceead
-
SHA1
525cd79367c01a8ddaf4b4e1689d976e1b5d0a9d
-
SHA256
17c152d1d53e8c6682c718bc2aa43b0a536a644bed138d1d985fedaf41c86223
-
SHA512
6feb49ff5ec46bd3ed38d9abc42944e94dbd53082b8ef4d1f16b2b65aa7d7f7d6c77b807fceb4c0f4dc711d46e0c360c34e5a57ebae5c87b306de11e43877c38
-
SSDEEP
6144:EbAuj84BucN3jVe9+yJr4IRSAYllscPTV+b+MeKl5Gtxj:UjfL3pS+yZ4Ih1cP5+b+MTetx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b97c0b3bce6f218855401663c05ceead_JaffaCakes118
Files
-
b97c0b3bce6f218855401663c05ceead_JaffaCakes118.exe windows:4 windows x86 arch:x86
f21e05129dc91033c5f7f93bbcfb525c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 142B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE