Static task
static1
Behavioral task
behavioral1
Sample
b8138e83a0fb31786b4ee9ae72c82c8b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b8138e83a0fb31786b4ee9ae72c82c8b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b8138e83a0fb31786b4ee9ae72c82c8b_JaffaCakes118
-
Size
42KB
-
MD5
b8138e83a0fb31786b4ee9ae72c82c8b
-
SHA1
39268cd440e04815832bc5e458aa1766a87c2293
-
SHA256
29bdc5cc6176703b6667ea2b20df959d384a87644f6fee060d087715266e9b4e
-
SHA512
86d3908dfd3c5c62378731d02f17b5dbe98275d50f7de9de42872e51c40b97db7148d7afbbc4e8694a7751ebe4a7b16489345e6f050f6fcf2ad99ab596445d2e
-
SSDEEP
768:Vs588ypamyHHtI8j3wsBdmSlKGQfvymKIjJukK5vez6CNjqEP4:V84pas+BdmqhQfKmKlkKVeWCN1g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8138e83a0fb31786b4ee9ae72c82c8b_JaffaCakes118
Files
-
b8138e83a0fb31786b4ee9ae72c82c8b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ