Static task
static1
Behavioral task
behavioral1
Sample
b635c8de426af1d3367cc601809f2852_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b635c8de426af1d3367cc601809f2852_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b635c8de426af1d3367cc601809f2852_JaffaCakes118
-
Size
111KB
-
MD5
b635c8de426af1d3367cc601809f2852
-
SHA1
318e2f3bd9fe49b6f83af31b0bd2f5df271a8f76
-
SHA256
39357a70ebce22aa3960537d6ee19778d3d54a56ed6b3ad7c36c8a056bfba0a8
-
SHA512
c374df9ae34de03f723b34acf0a06b9b1e9ddae3575598daa52b499b7c4cafc0234fdf3b5bb09233362f7a0907ece2de2e0eae06b20bf9acfa082832360b7db2
-
SSDEEP
3072:SSM//XBxx/mWH7GfQ2yAYqObx4J2vNbGfvGnd3gW5ZM4/u4E/:UX7yfi1bNdndPZMT4W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b635c8de426af1d3367cc601809f2852_JaffaCakes118
Files
-
b635c8de426af1d3367cc601809f2852_JaffaCakes118.exe windows:65535 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 49KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE