Static task
static1
Behavioral task
behavioral1
Sample
bb450e827bb3378c1ee6ebc1c0c8713e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bb450e827bb3378c1ee6ebc1c0c8713e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb450e827bb3378c1ee6ebc1c0c8713e_JaffaCakes118
-
Size
55KB
-
MD5
bb450e827bb3378c1ee6ebc1c0c8713e
-
SHA1
e844419ca021d7b032dd3b2d5a1e938cf22ca410
-
SHA256
fdecb8fc2f880346f84adaf93f77b413396026f1dbacd9226e071372b19cb9e8
-
SHA512
21284f5ba610d7b6943a319d4a300eb1ab7f96127825863864339a572e05b53f73ef2617a18d4ff79af44af2bde442227d4bf577b9a0cdc8c2d9ed5bf8b81550
-
SSDEEP
768:XFqBPl1sjJGLpk3SfSewGQN7Ml+u3cFZI+ScGXZbPUuVuJr201B81slm4jHzbByh:XFa0JkSOU7sNeZIi20TAAjjHzbBys3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb450e827bb3378c1ee6ebc1c0c8713e_JaffaCakes118
Files
-
bb450e827bb3378c1ee6ebc1c0c8713e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ