Static task
static1
Behavioral task
behavioral1
Sample
b8521d5282e280d4fa7aabb14bd5cfa5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b8521d5282e280d4fa7aabb14bd5cfa5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b8521d5282e280d4fa7aabb14bd5cfa5_JaffaCakes118
-
Size
3.4MB
-
MD5
b8521d5282e280d4fa7aabb14bd5cfa5
-
SHA1
9929a9dd4d3b95bdda207e1299cd93a6490f058d
-
SHA256
79ae57eca4d827d436be1567db910f4b92e1aaedb33b26818c1c39a7db1c63f9
-
SHA512
506758ee7ad50b3db0e9177c51e603a97ca9498052dcd31167045328bd96a16ffc580cf10e889031c636d889f7c8a2f33ab674e65e92c20adc6319bee8ffcf63
-
SSDEEP
12288:dqGI+vaD+1W55tjv5D57ZWZAV7gFyx69NvB68ZZZZZZZZZZZZZZZZZZZZZZ+w1CT:wz+F05H1ZWeZkNU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8521d5282e280d4fa7aabb14bd5cfa5_JaffaCakes118
Files
-
b8521d5282e280d4fa7aabb14bd5cfa5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
MODE Size: 428KB - Virtual size: 427KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
SODS Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SFQ Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.GBQQQ Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DEDOK Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.SEOP Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ