Static task
static1
Behavioral task
behavioral1
Sample
bae421b24c2db3a0d357633c18ccd3e5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bae421b24c2db3a0d357633c18ccd3e5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bae421b24c2db3a0d357633c18ccd3e5_JaffaCakes118
-
Size
429KB
-
MD5
bae421b24c2db3a0d357633c18ccd3e5
-
SHA1
068ab24893206c702162954787d747ba8241436d
-
SHA256
d5ab7dc71e9503d14b45c7a2bc98d4a09de62b6ed54e428f7751be8295287c01
-
SHA512
903746795ddfa41fa71b8254970de01e2dd616989101f061eb1932335b0274bb6c0fa96afc2034ede3819660b67fbbdbc68e2fdc1a75c5ea48142d7f9713914e
-
SSDEEP
12288:j7eMgq+9P1GTostV/CrsMGSU93Z6O1NVOQYp5O8uqK:jt+9EUsCrfGS6ISVOQg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bae421b24c2db3a0d357633c18ccd3e5_JaffaCakes118
Files
-
bae421b24c2db3a0d357633c18ccd3e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 407KB - Virtual size: 407KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ