Static task
static1
Behavioral task
behavioral1
Sample
b7efc249f7eaa09c072a62e3968b4702_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b7efc249f7eaa09c072a62e3968b4702_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7efc249f7eaa09c072a62e3968b4702_JaffaCakes118
-
Size
448KB
-
MD5
b7efc249f7eaa09c072a62e3968b4702
-
SHA1
63b7f950ecce32a77d7142db839c999fe937213a
-
SHA256
9716bea8d7d8fb4681f7c1dd0d19f1a1fa79478b6febf64b78550458ac93c97b
-
SHA512
29cba9e44fbe63927500e58df1a579c73533f4eb9ac8b04b21143ba070de8ab0e0eb774a1df35a7befe3f7b7517d667b2f5c662f42f4986c308db8d21c581b2b
-
SSDEEP
6144:qoqxmeYz8sCCHg12C8436O8NiC2nfeS3NpFGQoqgx4J4cQ43Ey3q5vNPT:qRx2CXJ84KXkC2nfeENHv3NEyGvF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7efc249f7eaa09c072a62e3968b4702_JaffaCakes118
Files
-
b7efc249f7eaa09c072a62e3968b4702_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 436KB - Virtual size: 434KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ