Static task
static1
Behavioral task
behavioral1
Sample
bb147c7d761071816655cc0733d9fa5b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bb147c7d761071816655cc0733d9fa5b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb147c7d761071816655cc0733d9fa5b_JaffaCakes118
-
Size
286KB
-
MD5
bb147c7d761071816655cc0733d9fa5b
-
SHA1
05669f3d38457c9a224db55dc7e107cc812abd6a
-
SHA256
0b4d0b5eacb22452d4fe174b63022bab96e817715f0d694f80d51bc4a7b8ac4c
-
SHA512
d71746e208c1c923ffb666127a82c07b6ca4509e8d771fddb52f65f0f0a19da917f6a7e078b6adf7704ee94c52e88f47dff5f1053e67f28a1e2a63644cd9f788
-
SSDEEP
6144:Asj4zDo9ixv5pLly/xGtx+y5eXtt2ZU2qV7mjRG2IN5/qVQ5qEFnCFWtD:AsSSixxFlyQtx+y5SRmNIz/HFnCKD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb147c7d761071816655cc0733d9fa5b_JaffaCakes118
Files
-
bb147c7d761071816655cc0733d9fa5b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 854B - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: - Virtual size: 3.0MB
.reloc Size: - Virtual size: 452KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 281KB - Virtual size: 284KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE