Static task
static1
Behavioral task
behavioral1
Sample
ba7bf80779bc34d6cd2c122aae0fca56_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ba7bf80779bc34d6cd2c122aae0fca56_JaffaCakes118
-
Size
735KB
-
MD5
ba7bf80779bc34d6cd2c122aae0fca56
-
SHA1
76f9ec4a0986d8c892700c762cf8ca0650ee7e6f
-
SHA256
6c2a9896430ebd46c373aed23898d64d0d1b872c15f9f690a8a29cf478b979a4
-
SHA512
cba1ae15dd134abe1ebeb7cc11fbe82ee59f9d067cac699b96b3b258fe0c34fbdf6656f8b4867740b51bf335f9ad5bb2008a2f2b0bedb113b16333af8f32641d
-
SSDEEP
12288:GDp20LiL+qI81leaplGt0y/2FEbkNvB5WlQ4URF42Brpkki6paTuB+/09HmEkqw1:kpd2+esapfEYNZ0S4+lBrpkki6ETuB+b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba7bf80779bc34d6cd2c122aae0fca56_JaffaCakes118
Files
-
ba7bf80779bc34d6cd2c122aae0fca56_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 40KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 225KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 373KB - Virtual size: 900KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Rana Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE