Static task
static1
Behavioral task
behavioral1
Sample
ba4c8bd1601cc3a5cb2e4e3557a0c65c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ba4c8bd1601cc3a5cb2e4e3557a0c65c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba4c8bd1601cc3a5cb2e4e3557a0c65c_JaffaCakes118
-
Size
113KB
-
MD5
ba4c8bd1601cc3a5cb2e4e3557a0c65c
-
SHA1
8b4f4810f83732528c657ac3410ac13643546ddb
-
SHA256
c906b82aeb3a2f5c2900618e91043c963b2332c004a86abb33e992b78b2ab27e
-
SHA512
56386c4a981c8ba0ecb2da5a20fc01989d69ef9c187662fb9cd10f3c3aa59fb5778339b3e2c32ae23f103da03eb5cf0eba782d610593f08a61c6e4f7c6e57bed
-
SSDEEP
3072:t+nttg184FSqER19qITug1DhKpwifnL5Rr/eg:t+tO1vpER2I62ANRyg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba4c8bd1601cc3a5cb2e4e3557a0c65c_JaffaCakes118
Files
-
ba4c8bd1601cc3a5cb2e4e3557a0c65c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
jvdwyt Size: - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nokk2w2 Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5onmi5es Size: 508B - Virtual size: 898B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE