Static task
static1
Behavioral task
behavioral1
Sample
b5b3e133af5d308f306a1987217837d6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b5b3e133af5d308f306a1987217837d6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b5b3e133af5d308f306a1987217837d6_JaffaCakes118
-
Size
388KB
-
MD5
b5b3e133af5d308f306a1987217837d6
-
SHA1
81e9cbc94718980c27d5769d4951751e68764327
-
SHA256
bbe7405f45f353ad62706773b6ac7d5d5d249c5ff5fa73ba168e4fc58a33085e
-
SHA512
e33d7dcde7fe9d591e9f8a0930464ca2936b332032793971ecb410722edb835e2042ec6b224c7890f1fa7f8d19754209d55f1ec193a368f4361888fa8daa3507
-
SSDEEP
6144:naKUryqW8M9oO/gJsgPiCnnuIx1t0384K4bLynvj17lomU1ml:/UmqW8M9NchPlnV1t+LyL5HU1M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5b3e133af5d308f306a1987217837d6_JaffaCakes118
Files
-
b5b3e133af5d308f306a1987217837d6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 321KB - Virtual size: 321KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ