Static task
static1
Behavioral task
behavioral1
Sample
ba0ca8670cb3381fcd4c4f1fd6c6e82a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ba0ca8670cb3381fcd4c4f1fd6c6e82a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba0ca8670cb3381fcd4c4f1fd6c6e82a_JaffaCakes118
-
Size
325KB
-
MD5
ba0ca8670cb3381fcd4c4f1fd6c6e82a
-
SHA1
2b0e83f6df638b4cea21a191ba1a154b04c40653
-
SHA256
6d399426272fdf620f15954b630b26a5ff9db39f019f1cf0dbd1e1fc69dcff0e
-
SHA512
d798a1b250eca52b8763b72683688ffc890f7cad50b6c8e421294c6062d651aea2514ebc1318f1c61469f721a594ae301b92f078245e10bfcbeff4db18ae7330
-
SSDEEP
6144:ifshgAzgr/8YWrh+FpkkR5FbZK05OSvdxEBGkEQTN4E7KIHO8siTOLT:iwgA8r/8zAkg5Rg05zdxAHE6eE7KsdSH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba0ca8670cb3381fcd4c4f1fd6c6e82a_JaffaCakes118
Files
-
ba0ca8670cb3381fcd4c4f1fd6c6e82a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 243KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 138KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE