Static task
static1
Behavioral task
behavioral1
Sample
b7b3a77af0093b73ef39bf5deb68f667_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b7b3a77af0093b73ef39bf5deb68f667_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7b3a77af0093b73ef39bf5deb68f667_JaffaCakes118
-
Size
9KB
-
MD5
b7b3a77af0093b73ef39bf5deb68f667
-
SHA1
2cb6b3c8a758346450211374fe4681ab2e4bbac9
-
SHA256
5cd9747ea2c2b677a50fdae67f7e83ffdb5d4b40b84bf33b0052b3c6a12fdc2b
-
SHA512
adf274e9275ba5586f8aec64fc81d275ccff93ab0a4f756594dd8af2f39ef2f47419d34fa695e186eaed17576709e9eacbaf21a6cb4ff2b0f248948d17e5640f
-
SSDEEP
192:fI4Olcrkr/nnN8r5YK06entcpdSTHXlqN+fmmFX4n1WJx:A1lXr/nmZGt3THXlqN+fj54Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7b3a77af0093b73ef39bf5deb68f667_JaffaCakes118
Files
-
b7b3a77af0093b73ef39bf5deb68f667_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: 6KB - Virtual size: 32KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE