Static task
static1
Behavioral task
behavioral1
Sample
b629269e9829b472ed927904df3354f3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b629269e9829b472ed927904df3354f3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b629269e9829b472ed927904df3354f3_JaffaCakes118
-
Size
401KB
-
MD5
b629269e9829b472ed927904df3354f3
-
SHA1
a3ca20208cd60c2b5f4b57752ce0d46d97b514a2
-
SHA256
8780d933fff34c8ae4dc767b5fccffecc1d91c59d5f20d0a102de520e5c09637
-
SHA512
3a0c04f87062471f1a3418ce86529c93f6447751e39f7b14068c4b64a01fc7fe33461f765fcf9839214e18b56540a256c80715de3a22d885d7c93d04e6ee5e01
-
SSDEEP
6144:d6lI748r+v3dbiVO93PeTw+7GZJUoMohoHYIYjoVomoEoUoRocENHRgPvSCsDr3h:gk9XVO9277LYIYsVRSHsDrR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b629269e9829b472ed927904df3354f3_JaffaCakes118
Files
-
b629269e9829b472ed927904df3354f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 200KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dw Size: 136KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE