Static task
static1
Behavioral task
behavioral1
Sample
b5eff19fb2444d49d88812f9a345b294_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b5eff19fb2444d49d88812f9a345b294_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b5eff19fb2444d49d88812f9a345b294_JaffaCakes118
-
Size
304KB
-
MD5
b5eff19fb2444d49d88812f9a345b294
-
SHA1
af5a1cab8e10c76cbd5cc59b98e8635176ada2b2
-
SHA256
4e02b692a6c655544cf4b895713d8a7f9fa7d2c9a9a770e5cb3ad961e2621002
-
SHA512
29108786fcc65acb7dfb4fe36751dcde5e874472be04089490389f9da27aec188e97901584acca321f1f8f941d03369ff22536cf1aee9421322de22a18cba42c
-
SSDEEP
6144:B9Ufck+gQF4B7XQ4Nqte9OOBYz3Lna3FV6Vv1eMYKum9JMwGSMy/x:PNk+ZF4Bc46eOOBsuVV6Lmbm9O7y/x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5eff19fb2444d49d88812f9a345b294_JaffaCakes118
Files
-
b5eff19fb2444d49d88812f9a345b294_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
y`�D0 Size: - Virtual size: 968KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
y`�D1 Size: 303KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
y`�D2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE