Static task
static1
Behavioral task
behavioral1
Sample
ba999b7cce8556ead6c74d70275efe13_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ba999b7cce8556ead6c74d70275efe13_JaffaCakes118
-
Size
1.9MB
-
MD5
ba999b7cce8556ead6c74d70275efe13
-
SHA1
9bcc217deccc4948fcbbb71799fd3cc8b824e0ce
-
SHA256
66c1a1f247eb11bddb366ed7bcb21cc90d211e2d58d8a5f4af4e150927664d36
-
SHA512
74b25a74f03063af5883ec76ddb2e75b1141034e5126284b7f11029a9fdea18bed1be3fe53f6f2f3cc27e41aaa5cff303b5d27408cb4f752d679b0529e5aee01
-
SSDEEP
49152:Cf0NQ1tZHpCxQeBC41NrIPLYhDjAOmJzLxQl5oHLceuXZY:fNQ7ZHpC6wLIPLYh4OmFLxQl5YQeuXZY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba999b7cce8556ead6c74d70275efe13_JaffaCakes118
Files
-
ba999b7cce8556ead6c74d70275efe13_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Services Size: 1.8MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE