Static task
static1
Behavioral task
behavioral1
Sample
b931d192c4efd9cb28636887de4f585a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b931d192c4efd9cb28636887de4f585a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b931d192c4efd9cb28636887de4f585a_JaffaCakes118
-
Size
22KB
-
MD5
b931d192c4efd9cb28636887de4f585a
-
SHA1
d1f71e92a9e4487380a28f547e0b5d4a933dbd16
-
SHA256
9cf952b25bc05964b00ad97f3820c6efb7fc19bed782e2320cbe66d6d5def579
-
SHA512
c43776a3e1ac179d1d9081d68418d676776b97a52f2dcd4cbe4650ef60e154ba4e16fffe01ecde471bb11371e8ebefc544fc6bdcbb2f1d18b6748de0d7f9ed2a
-
SSDEEP
384:VxJvdhRNwij6VuchJYeDWvtJGQLCic/RNqsnXMcW+0xN0lMXdC9d:nJvdvNGucEAWvtYUyRNqsNVMO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b931d192c4efd9cb28636887de4f585a_JaffaCakes118
Files
-
b931d192c4efd9cb28636887de4f585a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
520mm Size: 35B - Virtual size: 35B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE