Static task
static1
Behavioral task
behavioral1
Sample
bb8cf0f24ec434a72aa50ba8b8699bc7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bb8cf0f24ec434a72aa50ba8b8699bc7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb8cf0f24ec434a72aa50ba8b8699bc7_JaffaCakes118
-
Size
221KB
-
MD5
bb8cf0f24ec434a72aa50ba8b8699bc7
-
SHA1
e0b094d1924d7dfcd7cab5711749e8e30a626139
-
SHA256
99f5b605e9247a3e82dc3d90bef726713012891fbfd0155659be855d74476143
-
SHA512
fd7792ee05ec3649745a2a6aa97d8b310f2dd81afd975c31b386b72c4fbf81c715ba5966aba065b251cd2984fc28f76a28831060497c6ff9f5083a3fc4ba06bf
-
SSDEEP
3072:Fqi+P0udvdbRhaGKPwc+wjMnih2OyFIi8qinKcsK0JZkSCitGa8U7aqNNDTSO:oiqvdXjkwTcMnixeIi6nlWk6GamO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb8cf0f24ec434a72aa50ba8b8699bc7_JaffaCakes118
Files
-
bb8cf0f24ec434a72aa50ba8b8699bc7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
a0pxd Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 215KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 453B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 28B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ