Static task
static1
Behavioral task
behavioral1
Sample
1bba9e3dd172e2de1bb369b730ba0051_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1bba9e3dd172e2de1bb369b730ba0051_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1bba9e3dd172e2de1bb369b730ba0051_JaffaCakes118
-
Size
429KB
-
MD5
1bba9e3dd172e2de1bb369b730ba0051
-
SHA1
c269781a55deceaa327e8fa626adf8a024799a02
-
SHA256
c87d92dbfa943abba3a424d25286912f606c35c54d734d888f8edad038b09e99
-
SHA512
f1daae52d95b3ca3dd67b7c4f6c57bc1ecb557406bcea610760387335d0f3ae7d93aea9dd0e654cd78b0bb3e05a6367bdb084014f94072db6b0c38dffca70359
-
SSDEEP
12288:EcQchHyByJa5+1ptaWyxVypvQwAeFhBg8ogh6XH3Hn7x/FcgE:PjhSByfbyxsQWFhBgyAXH7xygE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bba9e3dd172e2de1bb369b730ba0051_JaffaCakes118
Files
-
1bba9e3dd172e2de1bb369b730ba0051_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 69KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Virus Size: 355KB - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE