Static task
static1
Behavioral task
behavioral1
Sample
ba682dcb0f9f22015465c1fe0c467d0a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ba682dcb0f9f22015465c1fe0c467d0a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba682dcb0f9f22015465c1fe0c467d0a_JaffaCakes118
-
Size
20KB
-
MD5
ba682dcb0f9f22015465c1fe0c467d0a
-
SHA1
d64dd6b9570929ef905b2acf25d27b2ff38b77d7
-
SHA256
ee2e79eed64411b7b540c95af77fa4b14bb46458b217867798e7f030d27cb246
-
SHA512
783d68cf648a995356ee03b02c5732e0e25d842f0c8c63f09ed8fa0d909ee85279f38bca0689cd5fcf1c9967aed836a42639543b7f79a5cc602d8db3920c1910
-
SSDEEP
192:h6MzXE0PhshZyaMDT6QcXWXqK7jpaSgGP0TjQnM+F+OZrqmIiW08ENttECEfR:lzzihZPMD+QcmVjnMMDpIiHttECEfR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba682dcb0f9f22015465c1fe0c467d0a_JaffaCakes118
Files
-
ba682dcb0f9f22015465c1fe0c467d0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ