Static task
static1
Behavioral task
behavioral1
Sample
b7d733edffcfdb3cbfa9d8d446396cbb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b7d733edffcfdb3cbfa9d8d446396cbb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7d733edffcfdb3cbfa9d8d446396cbb_JaffaCakes118
-
Size
99KB
-
MD5
b7d733edffcfdb3cbfa9d8d446396cbb
-
SHA1
b594858c396075df0233f44129abd629ba8fb2dc
-
SHA256
9738f5d17d14fb79c5b32165a0c9dc7993c2faa2f64a8d5daaaad9f643cce16b
-
SHA512
a3fcb82e2b70f2b4237d20ecece0a547c27343ce803bc34e816810e9f42c60c6a72c05dd8973f0d2aec400c6cb74d0910ef5ac80dee2e5ec445f33b844c4c8ef
-
SSDEEP
768:tIslTDncWAcdqP8+Lcn0E/AqJlu4Gr4qT01A8REFlYCLbamh/CP9XkFv:xT77/ScO4ReFph/CPZkFv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7d733edffcfdb3cbfa9d8d446396cbb_JaffaCakes118
Files
-
b7d733edffcfdb3cbfa9d8d446396cbb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.scpack Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.newIID Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE