Static task
static1
Behavioral task
behavioral1
Sample
bba8f64dd118e8c8e278c75dbe680ab5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bba8f64dd118e8c8e278c75dbe680ab5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bba8f64dd118e8c8e278c75dbe680ab5_JaffaCakes118
-
Size
682KB
-
MD5
bba8f64dd118e8c8e278c75dbe680ab5
-
SHA1
6e0301112565c3d71282b153dd98f597b17e1310
-
SHA256
5baeee643fdc9d5ed6fa78a5b0032b0b657012a6bfde03af51976dc089aaf61c
-
SHA512
b19c93bed81adb9acbf4879833b8dc0ce5a04bd6fa25345c3120f5755766d37c761029bc6d81bd53be7fd2e79be9499ab91f8d5eb0865200d8e20bafe653c9e7
-
SSDEEP
12288:m+vTXtvBdJ0JxVCKZr3jKz+rb+Kici6PCGcG4BUf5Y0TJQ+sCm:PVWz8z+rb+KbfCNK5j++sCm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bba8f64dd118e8c8e278c75dbe680ab5_JaffaCakes118
Files
-
bba8f64dd118e8c8e278c75dbe680ab5_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ