Static task
static1
Behavioral task
behavioral1
Sample
b9875ec7f6c09fa25fa3700ffa7e0e26_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b9875ec7f6c09fa25fa3700ffa7e0e26_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9875ec7f6c09fa25fa3700ffa7e0e26_JaffaCakes118
-
Size
46KB
-
MD5
b9875ec7f6c09fa25fa3700ffa7e0e26
-
SHA1
f0e63c04977df212c96e1f6a58ffb4ab4d43abb2
-
SHA256
c26cb0a820eee71ddf0bde38702e56fec1d4496084ab82f5bab7045b0a488796
-
SHA512
fba1b332d2461d53450989a236a7079a097f477d477cbe7334f8ddfb78411adb9f4fffd1356ae903428a8170e99e22f15e9419142c6efb423c33b918d6a4e5ad
-
SSDEEP
768:0e/TVLM9MuQ0NRJUORPHT53/KCYcaL3B7Ix2uAfLiox613taKYY:0Y+9MOiORPz53/KCYHL3RiAfLi7aKYY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9875ec7f6c09fa25fa3700ffa7e0e26_JaffaCakes118
Files
-
b9875ec7f6c09fa25fa3700ffa7e0e26_JaffaCakes118.exe windows:4 windows x86 arch:x86
d76f4237a8ae158292f09835997a1d9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
Sections
.text Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ