Static task
static1
Behavioral task
behavioral1
Sample
b8b3af6623b34173bd7d731ea7df19ff_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b8b3af6623b34173bd7d731ea7df19ff_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b8b3af6623b34173bd7d731ea7df19ff_JaffaCakes118
-
Size
72KB
-
MD5
b8b3af6623b34173bd7d731ea7df19ff
-
SHA1
6c1bb7321eede10fee3391e9c2ccf0a365684685
-
SHA256
2086c98136818aaedb6355f018fc102bd65a52f16c61c122ac90f7f7e9d92f69
-
SHA512
f9d0aa447f4e57a79a0b0f592145f88cdd9c8cc8e9fa431c9adf3c6facf9661dcd0569f898b7de1e7ae583826a826824ecf790dc9653c6fca1eebd9d03a3a779
-
SSDEEP
384:S4uOhpGVQX0D/W/aktaLBEKgViqGawKFPb7NMm9060XLCJ00fR1mfx:S4/oQ3RIdTloFj5t1E0LfLmZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8b3af6623b34173bd7d731ea7df19ff_JaffaCakes118
Files
-
b8b3af6623b34173bd7d731ea7df19ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rorg Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE