Static task
static1
Behavioral task
behavioral1
Sample
b981d8e1cae9299303db80629c46181b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b981d8e1cae9299303db80629c46181b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b981d8e1cae9299303db80629c46181b_JaffaCakes118
-
Size
353KB
-
MD5
b981d8e1cae9299303db80629c46181b
-
SHA1
f57ed6d6726a1f91ed34eb50f51509a03a433093
-
SHA256
1f98fb2650733ecb7bbf83dde42837da90afbc7d30214f4ebc8f6726b66242b0
-
SHA512
1286a4e063a82f98e6257797f8febf472760c844dfa27f112dd9e71c9a1298baa708ddbf7c8bef816a3fe04b0c55000fbabd9e82556e13ceaad6a5c7ba45d165
-
SSDEEP
6144:jRdcbOMb0aF2idZecnl20lHRxp3gBncduD7yB9VCO6Sco4q8+dE6CqX:ktblF3Z4mxx6DqVTVOCX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b981d8e1cae9299303db80629c46181b_JaffaCakes118
Files
-
b981d8e1cae9299303db80629c46181b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 312KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE