Static task
static1
Behavioral task
behavioral1
Sample
ba62da6afb00f3f0c091d48d821fe60e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ba62da6afb00f3f0c091d48d821fe60e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba62da6afb00f3f0c091d48d821fe60e_JaffaCakes118
-
Size
722KB
-
MD5
ba62da6afb00f3f0c091d48d821fe60e
-
SHA1
e4d1d14231699eccdff05c39ac5cf8f15f5c2c7a
-
SHA256
f905c070cc0de4fba804c79f7042b028678ec6bb1479dc32550a6e345a435cfe
-
SHA512
41a30814793441096826688baf886a2907b2e678c10ca2d2c03094d05e1039a20856cbb702a6cd8201b229e170129de2f0eb7de03e7adc2c11a85379ede613dc
-
SSDEEP
12288:NtWeIH7eXjqnZIYJpPx9Qh0h4PvjLppk9vQs/C9QejStF3Z4mxxrDqVTVOCX:LWeIqzqiYXfk0h4PvjLp+5Q99QeutQmQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba62da6afb00f3f0c091d48d821fe60e_JaffaCakes118
Files
-
ba62da6afb00f3f0c091d48d821fe60e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 752KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 406KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE