Static task
static1
Behavioral task
behavioral1
Sample
b98464f1499f29b84af570d57c61307f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b98464f1499f29b84af570d57c61307f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b98464f1499f29b84af570d57c61307f_JaffaCakes118
-
Size
89KB
-
MD5
b98464f1499f29b84af570d57c61307f
-
SHA1
4b71ac3b1d192036932e58324779f685154ec306
-
SHA256
dd36ebd34fb7ff9d74dfd9b4ceabd4e6ebd28dcc60799e3b430526e77be015a4
-
SHA512
4e2865fc4dd9dde706bf4de7be6aa7b27b87104e6f18e3a4da0b437495d19d3bb3c94b23e35ef134ddc82f6d9ead456c2ea01a14aa4f18630ca8ff97c82d5790
-
SSDEEP
1536:0SAEO03+UMd+/PQZ/jbldT4wIbYLBZJeEyAyuTd516hHMEJn5Nsc6:0SAEUUMc/PE/jbl94wIbYLBLJTd5chMN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b98464f1499f29b84af570d57c61307f_JaffaCakes118
Files
-
b98464f1499f29b84af570d57c61307f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 157KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ