Static task
static1
Behavioral task
behavioral1
Sample
f0b1bb2400861e87be9bfd8e10dc814b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0b1bb2400861e87be9bfd8e10dc814b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f0b1bb2400861e87be9bfd8e10dc814b_JaffaCakes118
-
Size
156KB
-
MD5
f0b1bb2400861e87be9bfd8e10dc814b
-
SHA1
56b4ebdae145a44d539bca2be2ad3ad7631fe37f
-
SHA256
b7f2c9076cab2df9e104f66c8f8bc84030d8c6f570fb82d9deaf6c5942dba4df
-
SHA512
4c8607f768d79ef2c59a1b0e4def2b9852e206e7b7b8a558b23004b301178604a4eb832efc49c6b32e3d0c53fd541560d7e43c8928b3f5890a524b9273c42388
-
SSDEEP
3072:MNWSCBTApESBFtUcptlrXxRjXVUm8fnRZLUblduR6VWeC:MNW7ApDBbx7rX3X2m4RZoal
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0b1bb2400861e87be9bfd8e10dc814b_JaffaCakes118
Files
-
f0b1bb2400861e87be9bfd8e10dc814b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
peC Size: 152KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE