Static task
static1
Behavioral task
behavioral1
Sample
b745a63ff7b205943474610dcb3e1c13_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b745a63ff7b205943474610dcb3e1c13_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b745a63ff7b205943474610dcb3e1c13_JaffaCakes118
-
Size
286KB
-
MD5
b745a63ff7b205943474610dcb3e1c13
-
SHA1
856723db1994f5fbe4bb6ec257a5baf4c25b5e79
-
SHA256
376308e7f155d0f799ffec345bea3785b8973f13d5e9db915eb8eaf40073aa04
-
SHA512
ae758cab1269631f96482c109f3351e474a4981db40b2e32ebc96b703d4c152059873ec86f55b02c2a3044fb44ca773a52ce85a79349070f10d3a85a56cf1b3a
-
SSDEEP
6144:eI7vMLcngcs4g/lR5tdTfbGQ3VG01tX60V8rV2xOq2:eJcR0lR5jLbGoVVvV8rV2xQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b745a63ff7b205943474610dcb3e1c13_JaffaCakes118
Files
-
b745a63ff7b205943474610dcb3e1c13_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
I � 0 Size: - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
I � 1 Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
I � 2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uLlujH50 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
.reloc
-
I 1
-
[0]
-
uLlujH50