Static task
static1
Behavioral task
behavioral1
Sample
b817832560fca5244ef3393152e3c7a8_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b817832560fca5244ef3393152e3c7a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b817832560fca5244ef3393152e3c7a8_JaffaCakes118
-
Size
525KB
-
MD5
b817832560fca5244ef3393152e3c7a8
-
SHA1
094de5817d77cef6339100698cf4c3df965383e2
-
SHA256
5f15488a7e355492829edaf3a8755619384dc725aa836eff1f3d364d5719e772
-
SHA512
9ae2333af910fe0ef90fdf125e6b99c88fc2a46881341ff2b55ed32dc862b7e88756fd69def7410911b72e6b1b1c6f6be64c97bae3f60c80b07e9076727c9094
-
SSDEEP
6144:EhcMSbFohE9q2PsXrSVew/X2+wZHeSPVep6s6BCF6GfEWfadRNH0QMgNoS4:ESNF2E9/cZw/X6eSPtfS6G6IgNoS4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b817832560fca5244ef3393152e3c7a8_JaffaCakes118
Files
-
b817832560fca5244ef3393152e3c7a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 348KB - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE