Static task
static1
Behavioral task
behavioral1
Sample
b62dfffe4f61810b4f827e7cc37ff6cc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b62dfffe4f61810b4f827e7cc37ff6cc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b62dfffe4f61810b4f827e7cc37ff6cc_JaffaCakes118
-
Size
97KB
-
MD5
b62dfffe4f61810b4f827e7cc37ff6cc
-
SHA1
0924b4d4b79487784dd750133ea3d9843317d898
-
SHA256
72d97f6d3de18adbd5ae88e2ce786bd01668400abcf7cad55449b1d85b7771b7
-
SHA512
ea045962e4a680e1c6526850cb4505f7e9cb4141849815ea5694cfa0e47e8bd2dc9a34299a0e7aebafc144928ff5b361eae7c4f72bdbf36305ee998025a74132
-
SSDEEP
1536:2WL0fFo3H3oVkr6MJYTu0T8oSx/mI1GuOAFIFR7Nzim0OoaF9B3gEBUpVSR:RgFonoVD8oSx/mvXAFIFR7Nzim04f1R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b62dfffe4f61810b4f827e7cc37ff6cc_JaffaCakes118
Files
-
b62dfffe4f61810b4f827e7cc37ff6cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 160KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ