Static task
static1
Behavioral task
behavioral1
Sample
b71f813479b1238f81c14816b0b3e67b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b71f813479b1238f81c14816b0b3e67b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b71f813479b1238f81c14816b0b3e67b_JaffaCakes118
-
Size
97KB
-
MD5
b71f813479b1238f81c14816b0b3e67b
-
SHA1
269cf16a191a052022702fc4d9bf927f6cf2f90b
-
SHA256
c4d456cc57c90a4f3977cd8bfe34686936f1bae7e2ff6945cfd1d55cb98ef665
-
SHA512
7f97ce64b6d437b4daf4f1fe74dd9c6ffb7a4421c59e0f3db0a0b7169514e2178a401f734af15b759608380ed9f117f8365c37d41f544aa1114495fcb62f13fe
-
SSDEEP
3072:s3maYHSSVm6mCjBDcSWou1DgmJoOE0Rt8eJtEP/U:qmae9VziSWo8ZJbE0hvCU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b71f813479b1238f81c14816b0b3e67b_JaffaCakes118
Files
-
b71f813479b1238f81c14816b0b3e67b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE