Static task
static1
Behavioral task
behavioral1
Sample
bb330d13249f3f76a61ad592587b3b15_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bb330d13249f3f76a61ad592587b3b15_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb330d13249f3f76a61ad592587b3b15_JaffaCakes118
-
Size
378KB
-
MD5
bb330d13249f3f76a61ad592587b3b15
-
SHA1
438700651d090050a53f4d2be9ad28f88a1d86cd
-
SHA256
ecfb1892e48591f7bfaf40a6445f30904266e692054f915643d63e6cea9a751d
-
SHA512
4a8a6b03a22eb51979d2a5282d696dc8ed8cb67d35e167acc9d1485cfa7282aa9b473ec0d38606024c88e80e9081cdb8109b7fe2c63b7b04596de75a93450c88
-
SSDEEP
6144:ikqphrgSbdqx+69K5XiRUD7Eofd5Jsa+4gYHokZmuLFn+df/pwxhqMqyAdmiDKq3:5SbdoYBuO7Eofd5Ws3c8Fncf0hqHmWKK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb330d13249f3f76a61ad592587b3b15_JaffaCakes118
Files
-
bb330d13249f3f76a61ad592587b3b15_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
v'�50 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
v'�51 Size: 377KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
v'�52 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE