Static task
static1
Behavioral task
behavioral1
Sample
bb4952a9687c5c97e519ea8a3088ae2c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bb4952a9687c5c97e519ea8a3088ae2c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb4952a9687c5c97e519ea8a3088ae2c_JaffaCakes118
-
Size
230KB
-
MD5
bb4952a9687c5c97e519ea8a3088ae2c
-
SHA1
ead9b4e0866dabfd05aa1d54bf8e370988ace867
-
SHA256
2f51c82cee9b105771efec927da5f07db560ebc9f097c144b5ed89df7a2b0e72
-
SHA512
2c1423ad3746f1c88837f2e7bceb9d05cfe3814c6c717da3fe52f3b60b4b3b48d6c2a61a2240018d56be08a30d8d6a8ada1cd4742478f6245fe5ad1276a30286
-
SSDEEP
3072:vptQtYlldBrg2NWHZqZGZFTc3sqVXsUgAmABXjVjS+pUNWijIWN:heWN5NWH1nIcM91jzyj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb4952a9687c5c97e519ea8a3088ae2c_JaffaCakes118
Files
-
bb4952a9687c5c97e519ea8a3088ae2c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ