Static task
static1
Behavioral task
behavioral1
Sample
ba617f5420df63f018b02bb649252275_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ba617f5420df63f018b02bb649252275_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba617f5420df63f018b02bb649252275_JaffaCakes118
-
Size
733KB
-
MD5
ba617f5420df63f018b02bb649252275
-
SHA1
339440afa96544a687462ec83c8561c667c22635
-
SHA256
447ed2773efe6e39c1dc3bf19e19925ff17490cd8dfd3cf282b27f4d11acabed
-
SHA512
beac10f9024f3ab8a0338adc0cfc1fbb45df20213c6df975bdcf7c91cd336019a451306aed82be380349f3d00e3deb40bd059d4337549b6578678422b3438171
-
SSDEEP
12288:TVcCOIZIJ8lG4i7YLnLtO94FD0pIRxo83aR6ocDgU5qIO4HEW3FwEM68XR:TVcYZIJ8lG4zq45baR6ocNO4f3yEMF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba617f5420df63f018b02bb649252275_JaffaCakes118
Files
-
ba617f5420df63f018b02bb649252275_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Gb9oT2ID Size: - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KoMjfLCN Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
C3PaWNKr Size: 700KB - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
3GFy0PoA Size: 428B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UeUdrnis Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ