Static task
static1
Behavioral task
behavioral1
Sample
bb66660e418b2b0ecdba3a0154a0f238_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bb66660e418b2b0ecdba3a0154a0f238_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb66660e418b2b0ecdba3a0154a0f238_JaffaCakes118
-
Size
16KB
-
MD5
bb66660e418b2b0ecdba3a0154a0f238
-
SHA1
20dce8f861ef8aa8852c584384c8a0ff6e75838e
-
SHA256
ff9489fef6dbefc5798a21a7869074d68d4b77b124f34edf0f66381bbde908db
-
SHA512
80807af303bd84e8d02136558c5289e0c06b389fb7d77a00072d5bd2b2db2819cf2cd11953ede143596723463bbd9c0f0fcc042b1b85d75e4d515c56f99566b9
-
SSDEEP
192:zgqXS/n/n/n/szEt1KDq5joR/rN5iFz956tq/n/n/n/1n/n/n/n/n/n/n/n/n/nj:Lwtcq5UVrN5yzTdjoSHbSqS6R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb66660e418b2b0ecdba3a0154a0f238_JaffaCakes118
Files
-
bb66660e418b2b0ecdba3a0154a0f238_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s3od Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE