Static task
static1
Behavioral task
behavioral1
Sample
ba07dc6bb70b8460810e0b535a39d45f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ba07dc6bb70b8460810e0b535a39d45f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba07dc6bb70b8460810e0b535a39d45f_JaffaCakes118
-
Size
497KB
-
MD5
ba07dc6bb70b8460810e0b535a39d45f
-
SHA1
d7e5e74dbe0474104ad9b969411c79be739566e9
-
SHA256
4a4841e8fb4bad78adb5e6766a3d1253b717f27fc093e9dfaa71f1418d3652eb
-
SHA512
695341645551f40646ae89a46312081ecf945e352790676e4439bb30ea43983cb82b609fdc3e18492e4198ef2fcb54850155594b42815479de5df58be18702e0
-
SSDEEP
6144:vCIZluDJTkPU7ZmS8xjZimVzSb79xRrhrRM4Yya/ckmayvx3K+uJ6OBJ8aZSJSGm:vCIMkPXFvVzSbRZm4Jvx3K+sXBJW8GIz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba07dc6bb70b8460810e0b535a39d45f_JaffaCakes118
Files
-
ba07dc6bb70b8460810e0b535a39d45f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 484KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ