Static task
static1
Behavioral task
behavioral1
Sample
babc9ab898ae3ec34dc9e4d9b484f4b4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
babc9ab898ae3ec34dc9e4d9b484f4b4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
babc9ab898ae3ec34dc9e4d9b484f4b4_JaffaCakes118
-
Size
59KB
-
MD5
babc9ab898ae3ec34dc9e4d9b484f4b4
-
SHA1
53942b8ca842d8cfa71d2a8212759a90e50eb6df
-
SHA256
e6889133c5d42885b55ecbde4074aa4befa5808fc817f0fe56148c8efdcdb1ea
-
SHA512
e34585793d9606f128ee650775c1346dae4ff69f5374ab34ab6c235c74c9e2aed821e0802e45b3fa49c7827e4c11c10e3f39c5a74379fbccd703378f870aaa10
-
SSDEEP
1536:xUFQfEcm/El8Vq1wLf/fyud+Li3f1zwQVgc:xkp8aqMnfymIiv1zwLc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource babc9ab898ae3ec34dc9e4d9b484f4b4_JaffaCakes118
Files
-
babc9ab898ae3ec34dc9e4d9b484f4b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE