Static task
static1
Behavioral task
behavioral1
Sample
b79d266f25b7435e838cd0e0cb82102c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b79d266f25b7435e838cd0e0cb82102c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b79d266f25b7435e838cd0e0cb82102c_JaffaCakes118
-
Size
2.2MB
-
MD5
b79d266f25b7435e838cd0e0cb82102c
-
SHA1
fff6b6964d3069d6ad450586b7980d4e269644f8
-
SHA256
4a96f1db0e732eb4eb0dd3b3b2477ac6f53ef901f13e6eb6847efb4742b6f9b6
-
SHA512
b869eeab39c74d3d980864c83b75fef30292d0e76c31d1a9cab7e9c127e15a445e87013ba724d4e52d5395bd71d759e41fc2a6543cf0f2982de4515a959000f7
-
SSDEEP
49152:EA74xO21Upg+1aqZ5DpziXRpsYH/0hlvEw2+wn9hNNyrzY3fx:EA921kt1rFGHXMHMw2vnTNEifx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b79d266f25b7435e838cd0e0cb82102c_JaffaCakes118
Files
-
b79d266f25b7435e838cd0e0cb82102c_JaffaCakes118.exe windows:5 windows x86 arch:x86
98eae827c2670032696561dd30542703
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32 kernel32
SetStdHandle �b1
Sections
.text Size: 1.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 624KB - Virtual size: 624KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ