Static task
static1
Behavioral task
behavioral1
Sample
b83a6419d7f78e8815f4f115b7273b22_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b83a6419d7f78e8815f4f115b7273b22_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b83a6419d7f78e8815f4f115b7273b22_JaffaCakes118
-
Size
45KB
-
MD5
b83a6419d7f78e8815f4f115b7273b22
-
SHA1
b67ba7decc3db037ce84a6956f341962fe31e8ab
-
SHA256
1823e33ea34d027be866df7ca77a2d8eec22c6d05ad1d81fde88fb1bbd6449e3
-
SHA512
b2042eb5169678756959bac114eea25417d67394c76a96ee1ee2bf4fbb95b747869669f4110919618c79a665e544de47430498c794162917850805293c71db6e
-
SSDEEP
768:c9FyRBrXcPo0LomyVXyEDel8CYk4HV8jr5AJFNcy259f5FwekD8V9LgctsWkc9RD:+yDjcPaRVEGtkMV8/CJFNcyE9bwe08VP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b83a6419d7f78e8815f4f115b7273b22_JaffaCakes118
Files
-
b83a6419d7f78e8815f4f115b7273b22_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 26KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE