Static task
static1
Behavioral task
behavioral1
Sample
bb9d99179b012364d34f1a0c92fe820d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bb9d99179b012364d34f1a0c92fe820d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb9d99179b012364d34f1a0c92fe820d_JaffaCakes118
-
Size
36KB
-
MD5
bb9d99179b012364d34f1a0c92fe820d
-
SHA1
11ba74dac79a04144b5a4af2aadf9afe14b11a24
-
SHA256
f3ff6e9cf1f58d21fd9578d9473b30ddc8f11a892d4c1194a740ea3a7e600445
-
SHA512
2508e85e361acb3ccfec1e89f0abf6bd55e91c044497bae382e2fd04512aaa668ac97f8998275ad5d52e8071fed9ee49972ec39e4347b488aa92ae8fcaddeddb
-
SSDEEP
768:NLpNJp9V/2sCUkm7rNbFJgEvJzPAexfPMGIkTWhtmu4Xp/ApP:t79V/BCUk4NbdJzPNX3TWt4Z/0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb9d99179b012364d34f1a0c92fe820d_JaffaCakes118
Files
-
bb9d99179b012364d34f1a0c92fe820d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
KGP Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KGP Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KGP Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KGP Size: 768B - Virtual size: 768B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE