Static task
static1
Behavioral task
behavioral1
Sample
bb5d0bb5c3ad36c1fe858139d18fa65d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bb5d0bb5c3ad36c1fe858139d18fa65d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb5d0bb5c3ad36c1fe858139d18fa65d_JaffaCakes118
-
Size
358KB
-
MD5
bb5d0bb5c3ad36c1fe858139d18fa65d
-
SHA1
9f4cf422f7e269501b61d85a2dc550060d19e8d1
-
SHA256
ee86d0681994d84d9ef9eb682a341bf73a1c565e41ac1a657085f64035df8973
-
SHA512
c52c13c4a558a435b798e339d8341179f8f5a2e60f7528d57ac866a8d8a1a1df1419a4a1edc6a96765b4d1daafbf098c48cdca31008027decdb4d9581e42da7e
-
SSDEEP
6144:+guIxpkzqYM5F2idZecnl20lHRxp3gLncduD7yB9VCO6Sco4q8+dE6Cq5:+O3kozF3Z4mxx0DqVTVOC5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb5d0bb5c3ad36c1fe858139d18fa65d_JaffaCakes118
Files
-
bb5d0bb5c3ad36c1fe858139d18fa65d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE