Static task
static1
Behavioral task
behavioral1
Sample
b62c88daa80869ecf07fad33018dc846_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b62c88daa80869ecf07fad33018dc846_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b62c88daa80869ecf07fad33018dc846_JaffaCakes118
-
Size
477KB
-
MD5
b62c88daa80869ecf07fad33018dc846
-
SHA1
14ed67085b2484e27b2313c3597607deaea26c2a
-
SHA256
d7dab241dd0d5a875025219ea9bef1da569130006a0dc6d38cd8bc52e060a504
-
SHA512
3a4b86409fbfff8c887eb0c0526cad2e3b9d101caea07404c9b1c34c7ca7158d8ebaeb8d237a9d192a60648eec0b19df3fb0599cacca232e9a16be3535ccd5c1
-
SSDEEP
12288:VR94F5V5V5drNXXS1RR3YY+qNNzhFpp4kkN44:Vz4F5V5V5d4dYY3NNzh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b62c88daa80869ecf07fad33018dc846_JaffaCakes118
Files
-
b62c88daa80869ecf07fad33018dc846_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE