Static task
static1
Behavioral task
behavioral1
Sample
b9332987157c50338bedc32a8857ad7b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b9332987157c50338bedc32a8857ad7b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9332987157c50338bedc32a8857ad7b_JaffaCakes118
-
Size
161KB
-
MD5
b9332987157c50338bedc32a8857ad7b
-
SHA1
99f1c149d4105bdfa150a94a4245cff92fae36b1
-
SHA256
466c1977aa30ae72c6232f727fb99207e49bdf1bc9767ab27671b7e708e638bd
-
SHA512
cf97200b9a853b9924ace970d89099fa3e99d2e986209136b2cbe4f9f92edcfa8c7a6c46df3daeaf356914cd81ec238efa46c8cf357f1584107aad7303da1fa9
-
SSDEEP
3072:VTQaGlmeMr2l4Z5IN0/Ybl1jpVwGhixMrCJEydFfI:tZGAeMGd0/QVwG7rCJEKFf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9332987157c50338bedc32a8857ad7b_JaffaCakes118
Files
-
b9332987157c50338bedc32a8857ad7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 492B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ