Static task
static1
Behavioral task
behavioral1
Sample
b673a56f877070e169c372ab8230ecc2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b673a56f877070e169c372ab8230ecc2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b673a56f877070e169c372ab8230ecc2_JaffaCakes118
-
Size
652KB
-
MD5
b673a56f877070e169c372ab8230ecc2
-
SHA1
1812289f9f62f6abf086596fa4f8b31b36d492c2
-
SHA256
588fc7d6f158dc82ca6d94ccdb39b8c1c8b21e4c427a2806c4b48b65170b962a
-
SHA512
1a4e3b4566d23faf82e9632f490c0c489a83386e5e8858034750c12b3deb0b05c718119d1937d502311d0d61f3b769c4f90d6cbf3aca9901e1f44d96105ee498
-
SSDEEP
12288:iSb/mpgAfoejNVPXlE3eEMRzD33u1c9TguTnbEcwr4+zuzPP4vHBxpF5FhqYT:iSbg/ge01MRzD+uUuTnm4uSPyBPF0U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b673a56f877070e169c372ab8230ecc2_JaffaCakes118
Files
-
b673a56f877070e169c372ab8230ecc2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 396KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE