Static task
static1
Behavioral task
behavioral1
Sample
b6ca1008c937274f4d38409e98e02d3e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b6ca1008c937274f4d38409e98e02d3e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6ca1008c937274f4d38409e98e02d3e_JaffaCakes118
-
Size
938KB
-
MD5
b6ca1008c937274f4d38409e98e02d3e
-
SHA1
5e692d35f4140351a2d7e8db9bf3a39c93d40de7
-
SHA256
5a09d3a4e4270c5bd0d2dff316754cb50908ec8bbc84707f3126a030ae2b4180
-
SHA512
0b57f084664578425ca0591c78ddbfde6a52014a99c9c81aa5d0d6d517754ebb5eee07e8cad3dae3feab63872ce47600ffe79904106153b72af14e332a9ae7da
-
SSDEEP
12288:FbwsM3HbvJsf15sFN9O++xiFLDfq+xatryMSFTMHfvXXA/MhFaYgLaBTDR7FW8ay:esM3Hbvw03d+6CxHQQFax+trXvHKSVqW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6ca1008c937274f4d38409e98e02d3e_JaffaCakes118
Files
-
b6ca1008c937274f4d38409e98e02d3e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 632KB - Virtual size: 631KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 408KB - Virtual size: 33.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 556KB - Virtual size: 554KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.secu Size: 256KB - Virtual size: 253KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE