Static task
static1
Behavioral task
behavioral1
Sample
bb093a799b71cd9be8a08faacb01ebeb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bb093a799b71cd9be8a08faacb01ebeb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb093a799b71cd9be8a08faacb01ebeb_JaffaCakes118
-
Size
42KB
-
MD5
bb093a799b71cd9be8a08faacb01ebeb
-
SHA1
25931e8b4f089c5589dba55d86d7f2dcc8ee2056
-
SHA256
0643bc8ceae7063219536b19892fce000880f6a2e11a61c29c612260d3e575ea
-
SHA512
6df617378809f925db0c9c97799e3ebdb52b4450aa9faf793e8f820c0d45077db2b6437445b1aaf05f18411508cc3350b761093769b5bcf73e8c4587d694ae60
-
SSDEEP
768:4cdqTiygmbK5pIDp32bNwCOMeQv3dxHLk5TexVVVPkuQQQQQQQxFKqXe333LhdIQ:4cdqzwpIDzCdqmVVVPkuQQQQQQQxw2ex
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb093a799b71cd9be8a08faacb01ebeb_JaffaCakes118
Files
-
bb093a799b71cd9be8a08faacb01ebeb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
TNT! Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TNT! Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE