Static task
static1
Behavioral task
behavioral1
Sample
b9e31e369733c332de8c80bc3e3b049c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b9e31e369733c332de8c80bc3e3b049c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9e31e369733c332de8c80bc3e3b049c_JaffaCakes118
-
Size
167KB
-
MD5
b9e31e369733c332de8c80bc3e3b049c
-
SHA1
55f7bd0e3f12967df10bd70601725e00a2f40b88
-
SHA256
2abe8b212ed33afb733101bb4cb33a82155f15c77f4e65d6f1540cfb13739e93
-
SHA512
49b817a51834f7416b6a32d08eb39bc264ab4dfc55edc4535416b51bdd5e781a9040126d1921040e11ed11ebc051ea070ba8f21bc2cab3cb1aa34570535fabf5
-
SSDEEP
3072:3ZP2Et1BS7kbwA4hySP9viCAzcocQk5aGC2aXnfkgJa+oHZdJS:3N2ojS7g3YAz45W2aXnnJeO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9e31e369733c332de8c80bc3e3b049c_JaffaCakes118
Files
-
b9e31e369733c332de8c80bc3e3b049c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
V3op Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wVLQuo Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE