Static task
static1
Behavioral task
behavioral1
Sample
be8a32d1fb15e527d0ab647d2ae82cc4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
be8a32d1fb15e527d0ab647d2ae82cc4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
be8a32d1fb15e527d0ab647d2ae82cc4_JaffaCakes118
-
Size
91KB
-
MD5
be8a32d1fb15e527d0ab647d2ae82cc4
-
SHA1
d161f6486c39d2428de625360a8d50aaefc35002
-
SHA256
83bd8eab980acdc858e478294a54112a5024364f2e98917279d298af9e1ef00b
-
SHA512
582860b50f59d37404f6f438e369e7d706af07781b401e785bf5b830b70f000b9938cbc7d6440f1c0596bba16c6b0b6d1d6ddeae5cb7cf9a7bc94e84fddacdfb
-
SSDEEP
1536:V6pMSCiSrc07jnqbYkYLAMvc865xvu2aVYNLQl4af1573vwQYeyBPh1WTtpM9:MWiSKbbYLI1aViLQlHf73vWsE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be8a32d1fb15e527d0ab647d2ae82cc4_JaffaCakes118
Files
-
be8a32d1fb15e527d0ab647d2ae82cc4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
h5k Size: 112B - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
m Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ju Size: 4KB - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE