Static task
static1
Behavioral task
behavioral1
Sample
b7f82204c33c34440f3d9e9a8214bd20_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b7f82204c33c34440f3d9e9a8214bd20_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7f82204c33c34440f3d9e9a8214bd20_JaffaCakes118
-
Size
80KB
-
MD5
b7f82204c33c34440f3d9e9a8214bd20
-
SHA1
3352eb543ac96be4e5295f44c2e2234962c30fca
-
SHA256
0a7d7e72e884a714f030ef71ce23ac81335d826fb6dad9784229944e4477acfa
-
SHA512
f715c50af8cba51c5c698bc0a42ec64fc563e729e2c0bff08f19d1ad0d9e969bd987d57afc7d2d7a21839b3c497963259c78c32f719f8af0930fe3e2b86553d3
-
SSDEEP
1536:aIbVouYd0JBbUNPd0HNSfvcWK7fseGV6qA130VWa3N1sA8hSAHp3Cw6zBu54ej/3:dbbwS/tSfvgLseGMqAKwaT8bHpp6g4+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7f82204c33c34440f3d9e9a8214bd20_JaffaCakes118
Files
-
b7f82204c33c34440f3d9e9a8214bd20_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 180KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ