Static task
static1
Behavioral task
behavioral1
Sample
b75f6d074bdc0118ac2e9aad1386b9ca_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b75f6d074bdc0118ac2e9aad1386b9ca_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b75f6d074bdc0118ac2e9aad1386b9ca_JaffaCakes118
-
Size
130KB
-
MD5
b75f6d074bdc0118ac2e9aad1386b9ca
-
SHA1
92cb23aa3b12a85e1a543ca7e9f630185bd21bf5
-
SHA256
17952ae415c5e5a621adac6f7aacce67f729d0b13f18cded6d976d8dbf715817
-
SHA512
e468764471961c720948c954d8474fb7d6eb94b33199e9b87a6bec0ea9be247a5fbe607d422acdce2fb69d7108b1bfad9c04017dac844e2aa1baf6d7b398c060
-
SSDEEP
1536:slD0221MjWsawWtjJTwS9euQnTPFFrNLRIO2lnToIfz/B1:8j2G+JTYumTvN72NTBfzZ1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b75f6d074bdc0118ac2e9aad1386b9ca_JaffaCakes118
Files
-
b75f6d074bdc0118ac2e9aad1386b9ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
8way Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE