Static task
static1
Behavioral task
behavioral1
Sample
b4ea1390df0350e81a31cd9d71a3299a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b4ea1390df0350e81a31cd9d71a3299a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
b4ea1390df0350e81a31cd9d71a3299a_JaffaCakes118
-
Size
102KB
-
MD5
b4ea1390df0350e81a31cd9d71a3299a
-
SHA1
57b79b2ef8eb40b6ee68b28182aae45f4402f994
-
SHA256
1de6581d30624d351ef9adbd341fb3cb82bd26e489f7fb3dafc9d62c602ccef9
-
SHA512
7f4d968cf6f2e35e9a28bd3453e953b71fb94cc79841646feda7d5256ad41b9b8026bf2488445807a85e3415ed4b7f3ab139e5781fd76b432259608fff3f5b5b
-
SSDEEP
1536:m9CKjDzs30K75kPqRrNkFqyK1laStRPg5L1knj9+S29HYnjy1TFPjKvwLGlxYAT:mvjDzsCE6NolaS9nQS2syvaxF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4ea1390df0350e81a31cd9d71a3299a_JaffaCakes118
Files
-
b4ea1390df0350e81a31cd9d71a3299a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 96KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.depack Size: 361B - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.armp Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE