Static task
static1
Behavioral task
behavioral1
Sample
b817e9b274e70d1d382a29362457b5ce_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b817e9b274e70d1d382a29362457b5ce_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b817e9b274e70d1d382a29362457b5ce_JaffaCakes118
-
Size
392KB
-
MD5
b817e9b274e70d1d382a29362457b5ce
-
SHA1
9e79e8b887b792683a3470380647a3a1cdf80deb
-
SHA256
571224f9295f7105840845a07fb16e0ffd40ce28954f6118f2f9f4d1654b6bac
-
SHA512
dab9236148746063f0fd95b5b4536fca94625ae1ac5b8eaa056f495a1e4b658de09eb765ba02e0450ded069bcf8a405813d7d98f8b8f3ac404435d51389375ed
-
SSDEEP
6144:bYYixxn4UcDNoBtZ9yJtT2SJFlLvwVtMa2JXDXZLnZC5zBk24dhewJPomPH8Mucn:EYcN4UcDNiwT2SJwT0b5Y1mPhU/nvZEb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b817e9b274e70d1d382a29362457b5ce_JaffaCakes118
Files
-
b817e9b274e70d1d382a29362457b5ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ