Static task
static1
Behavioral task
behavioral1
Sample
bb092977f1e94aa36bfe2fb3fb811c40_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bb092977f1e94aa36bfe2fb3fb811c40_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb092977f1e94aa36bfe2fb3fb811c40_JaffaCakes118
-
Size
123KB
-
MD5
bb092977f1e94aa36bfe2fb3fb811c40
-
SHA1
d2eae56c3b366dc6e0ee47acb89f5a156ca99f18
-
SHA256
2e28d234575f29eabce3393857b677354a7be073366920b8e88c0f41bb16a2dd
-
SHA512
b3698154330728e84d969dd3089a5b5dee255a71a3e3e1517629a68fe2c9566e05c200aec4a30c3b07e01fa3b69a2561af84f91fd3e507b4fcf677571a58e45f
-
SSDEEP
3072:s0Th0udiRJ3xPfmsswKxKrjcuQf912G1nDoZXtYOnJfxYhMp:sKh0CilGsswKxKXcdl12G1oZXfnJEE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb092977f1e94aa36bfe2fb3fb811c40_JaffaCakes118
Files
-
bb092977f1e94aa36bfe2fb3fb811c40_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 440B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE