Static task
static1
Behavioral task
behavioral1
Sample
b853d96d0dcf75f143deb74164dc6231_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b853d96d0dcf75f143deb74164dc6231_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b853d96d0dcf75f143deb74164dc6231_JaffaCakes118
-
Size
657KB
-
MD5
b853d96d0dcf75f143deb74164dc6231
-
SHA1
7964d2ce5da10cd219c6f126b03c188a921be370
-
SHA256
127b5508312579aa6e6d3f708ef7cb6fe39e796756147c188b8c53c5f63f83ab
-
SHA512
7f8b2e136cfd93bd5ba98df2834e25af12a391641b5155dc47e747d46a244fdb9a0d2d2ca70729806fa19319c11faea976098ad10123cf0f92912e83ffc2dd17
-
SSDEEP
12288:jvDomv1TLLtojXgCqXDvsesgqTzOW9nhtyuT99ICV9QjJMmPLV50FRB:jvDflLIgVXDvsjgq3nhtrx9HjQdM80
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b853d96d0dcf75f143deb74164dc6231_JaffaCakes118
Files
-
b853d96d0dcf75f143deb74164dc6231_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 656KB - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE