Static task
static1
Behavioral task
behavioral1
Sample
ba4f5e0fa71196cc319e0f0a68b41f3c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ba4f5e0fa71196cc319e0f0a68b41f3c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba4f5e0fa71196cc319e0f0a68b41f3c_JaffaCakes118
-
Size
116KB
-
MD5
ba4f5e0fa71196cc319e0f0a68b41f3c
-
SHA1
6cffc402bc1ee4b7dddca24530d5c6b54a237d6f
-
SHA256
12662230b9e1c6e01b18d24de694f479f41c0d3ca383eadc696e7e078413c928
-
SHA512
c6aed0be07c9d961758f524dc26d5323fcf2a7558a76aa0f595f3dbbf0137e449698494304d84facaa500400d5c29253063aa2c05f55894fd6fb821fed0f9962
-
SSDEEP
3072:IgvFNgy3mSO4P2nY5VLoqHSEzlipjrHd0:IgvFJ3mp4uYF723u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba4f5e0fa71196cc319e0f0a68b41f3c_JaffaCakes118
Files
-
ba4f5e0fa71196cc319e0f0a68b41f3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nezxw2g Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8aoq Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wjyg7 Size: 315B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE