Static task
static1
Behavioral task
behavioral1
Sample
b607853a069fcecc0093c724e1fc1c73_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b607853a069fcecc0093c724e1fc1c73_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b607853a069fcecc0093c724e1fc1c73_JaffaCakes118
-
Size
429KB
-
MD5
b607853a069fcecc0093c724e1fc1c73
-
SHA1
b7e8417edc6640aefc776531983f02cdca79a7d4
-
SHA256
a45cad4c2e018c3c8b4095f7c9c525547235af9b01aa600c7d2581b277a071b4
-
SHA512
3e7728d1b8e2bfd41404a854f965dbe38678ab4f2fdd0fb2ba0ea9e0786b76f7f190d8cda8b81def8876752316abe34e1f45c64cf9452526ded2b2b597621208
-
SSDEEP
12288:k6xd73eYqaIkLgJzAnG8RK2l5Soha7qu+DYtBUufY:FNIk+y/p5SRO/UtBVfY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b607853a069fcecc0093c724e1fc1c73_JaffaCakes118
Files
-
b607853a069fcecc0093c724e1fc1c73_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ǔE�g%? Size: - Virtual size: 584KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
*�X�w?� Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
c��?�n?� Size: 421KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�����SD- Size: 845B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ʐM&}?� Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
w�� ��� Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�H���Hib Size: 28B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ