Static task
static1
Behavioral task
behavioral1
Sample
b9fe6bb8911048e534c75923e0340180_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b9fe6bb8911048e534c75923e0340180_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9fe6bb8911048e534c75923e0340180_JaffaCakes118
-
Size
103KB
-
MD5
b9fe6bb8911048e534c75923e0340180
-
SHA1
9acf7affcf03a080d4d1cb8c5687f9e742deb440
-
SHA256
eecc64c09e0f0816ef6cdbfb5234f02297d539c36743ae77756a85cab21e9736
-
SHA512
a1f6abb1c35c95a62b3b333a463b2d3c19d426c6b7c37d4a4906cd3b8333bbffbec2da41c45d6afb470be3a134e328c3f153bc2f0b0d60344d63aadb971fa377
-
SSDEEP
3072:QiKQYko3PoS6bO6bXfNq7PVIttAFjbNA:Q9QYJ/36Xf8zVYto
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9fe6bb8911048e534c75923e0340180_JaffaCakes118
Files
-
b9fe6bb8911048e534c75923e0340180_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 3KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE