Static task
static1
Behavioral task
behavioral1
Sample
b809de49d57ee554c7e581563a35a9be_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b809de49d57ee554c7e581563a35a9be_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b809de49d57ee554c7e581563a35a9be_JaffaCakes118
-
Size
78KB
-
MD5
b809de49d57ee554c7e581563a35a9be
-
SHA1
85b3a22fb951a3bd9412965ec0e86d393778bf36
-
SHA256
4ef69973dfa23f7f9d52f10e2953694986b9db7aab6aa8ff94181bcf521d62d9
-
SHA512
3e71a20673b01201d2dbb320e5b08a84f5079cfa0f3ea89f021d6aca4ac40e04c6790cc1cbdbdf4bb21a990dbea98b1f211a5b98b3b2717c6850f7e26a385262
-
SSDEEP
1536:DJDxImJrIjPALmdqvHtu9NYgERs+p/2gD4Z/57myZgQxhTFO0V5wt6IpOzqAhE:DlxIm+jIDH0NYgX+p/fexq63PvwtXYe1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b809de49d57ee554c7e581563a35a9be_JaffaCakes118
Files
-
b809de49d57ee554c7e581563a35a9be_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE