Static task
static1
Behavioral task
behavioral1
Sample
b8babd1d3bbc9aa30674162f764c5c7b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b8babd1d3bbc9aa30674162f764c5c7b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b8babd1d3bbc9aa30674162f764c5c7b_JaffaCakes118
-
Size
896KB
-
MD5
b8babd1d3bbc9aa30674162f764c5c7b
-
SHA1
e2e1cb832f751d115e18d833b5f840d270d13cab
-
SHA256
f962136611dedc748a59fa8d9d336ce1ce919f9fff1bd53fdf0f9c1ddd20ec55
-
SHA512
471d03937ec84f3c64108186dca150e3f36dff7e92c0693a75fb734205a4a03aa5992ec7c03094ce59454ea3dac9384e388aef789a7fd766b83818078b9db23c
-
SSDEEP
12288:W4oB1kxTUUIrFIZIaEgWkQrJQEuSSMSeiuYQ2PkNZAAsV0918dl7RmtnzGOHbtZR:W4yuhUVFsIaEgWhCqVY9s7XxOKaWyPi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8babd1d3bbc9aa30674162f764c5c7b_JaffaCakes118
Files
-
b8babd1d3bbc9aa30674162f764c5c7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
5290 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5291 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.!rc! Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 868KB - Virtual size: 868KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ