Static task
static1
Behavioral task
behavioral1
Sample
b7d1df23f126520a553ee017597aa36d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b7d1df23f126520a553ee017597aa36d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7d1df23f126520a553ee017597aa36d_JaffaCakes118
-
Size
319KB
-
MD5
b7d1df23f126520a553ee017597aa36d
-
SHA1
ad28be7bf60fd8e237a421a59931ebf3e0503beb
-
SHA256
ccd8fc91486131a829d6b2d7fdd26cd8bb2b9e303d730cb64f9f669de2154e8e
-
SHA512
9935d3a0499f60be982a54fd1fff56d1e4d434ac6222221bad08bfe94205392d2936885348a564681ad06d6aacced69ba6a369faabdfce114a7f4c347e32f2c4
-
SSDEEP
6144:XOKBjBeErPGvIlBrWT0zrFl1C3BL9CBDvSLNvcG9:+orOQlBS2s3BL9uDvRG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7d1df23f126520a553ee017597aa36d_JaffaCakes118
Files
-
b7d1df23f126520a553ee017597aa36d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.xsds Size: - Virtual size: 796KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aaaa Size: 265KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ghfg Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oydf Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s4dx Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE