Static task
static1
Behavioral task
behavioral1
Sample
b76ba9665f5846102b4235f7ee252429_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b76ba9665f5846102b4235f7ee252429_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b76ba9665f5846102b4235f7ee252429_JaffaCakes118
-
Size
101KB
-
MD5
b76ba9665f5846102b4235f7ee252429
-
SHA1
855b977e31c4881bda1b783e794c16a6d61e18cb
-
SHA256
2551013ca5885133372fedcfb8f176b1f19f01ae75921e8194a0b1bead1df61b
-
SHA512
d66a4536a04589c62873654c6587592b2eec29c0221919995052f346e5dd59a6e561e59a909850f05a4e92ac788406dd1ebd7798b3c245ea4787ca2f46c53176
-
SSDEEP
3072:rze+9pjCeIl/YXIHVFa11FuUX0vvCo4F5tQ:rGjJL1Fa11FubD4btQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b76ba9665f5846102b4235f7ee252429_JaffaCakes118
Files
-
b76ba9665f5846102b4235f7ee252429_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jqotyy Size: 2KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.cfcrec Size: 108B - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hciwxm Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ