Static task
static1
Behavioral task
behavioral1
Sample
b67d362430a770d5f016fce01ec8ff77_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b67d362430a770d5f016fce01ec8ff77_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b67d362430a770d5f016fce01ec8ff77_JaffaCakes118
-
Size
336KB
-
MD5
b67d362430a770d5f016fce01ec8ff77
-
SHA1
e0a163c9214711dfb8c96719a28bb2c7c35c1552
-
SHA256
79987bc3be7f21731a4153a1c3d38c225454566395a0579faadcac81cf6bdbab
-
SHA512
6cb9ed9f9ec6d463c4f215d8133cbd25d24ac03cce5cf08c16adb7c3d98c33771d0772d3f22411b28a544cec998ffb9f0173b6044daaf84deeeb1c9873a5f9f2
-
SSDEEP
6144:XPSGg9xReC9eY4nDWgRAkPvGQn8xID0DMFhL5TPBKEa0OoWOQ:/Q9xRQpR3PvGLxe0DMw9oZQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b67d362430a770d5f016fce01ec8ff77_JaffaCakes118
Files
-
b67d362430a770d5f016fce01ec8ff77_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
FPp5SdEG Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ChW8avWh Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
OZNFY7Rg Size: 301KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IHJ3KUI5 Size: 295B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0ICFj14c Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ