Static task
static1
Behavioral task
behavioral1
Sample
b665c03590aae2109300079006b26f23_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b665c03590aae2109300079006b26f23_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b665c03590aae2109300079006b26f23_JaffaCakes118
-
Size
144KB
-
MD5
b665c03590aae2109300079006b26f23
-
SHA1
fc2d1af5d922f9cd3fa97fbf3264f9052b0d9fa5
-
SHA256
c00b34fb7db6e09acaf3a077848400cffcc52bc695b6c08d0e41c878f3a816b7
-
SHA512
15d1b120c7d0603757cc7f8787976ec9ca7382754c5d6edd44bf3338344aeed86cbac13f1bbe3c16616056e164addc3de307d309ebc39bbd0773c45a33c24d53
-
SSDEEP
3072:4GZ6VWSwAKxrEHv2wLW55ckyRPXvHnSHwUNC849d:4G3VddEHfLyyhHMNCr9d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b665c03590aae2109300079006b26f23_JaffaCakes118
Files
-
b665c03590aae2109300079006b26f23_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.newimp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE