Static task
static1
Behavioral task
behavioral1
Sample
bb01fe1c462b13bceb42f66acc6cf1a7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bb01fe1c462b13bceb42f66acc6cf1a7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb01fe1c462b13bceb42f66acc6cf1a7_JaffaCakes118
-
Size
613KB
-
MD5
bb01fe1c462b13bceb42f66acc6cf1a7
-
SHA1
1496e581bd78883b26c7f7877a773fc3fb2fadf4
-
SHA256
c3e3ac1c27f65a437f83e8746328324902d2012223b1912cf2d466dd9647a5bb
-
SHA512
fe2d4a1a79f6b1a0f0bf3b059f629b1a47c118b503f4dbeadfdaece1acc3b7f98a6fcdaf0f177a6c50f67526f45723b9d79a720a18b558499d06b296a8a89eb1
-
SSDEEP
12288:NIXcG1Cg/Ro6ChSy6ifTC68AagBccqkiUMCu5t4WVhx2ijt0Z308TzNdrX8NGZ6c:NIXBvQlF8ALMfciC08TzNddZ6a53
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb01fe1c462b13bceb42f66acc6cf1a7_JaffaCakes118
Files
-
bb01fe1c462b13bceb42f66acc6cf1a7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE