Static task
static1
Behavioral task
behavioral1
Sample
bb96315f1fd4b28d9c9cfbdc4f304298_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bb96315f1fd4b28d9c9cfbdc4f304298_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb96315f1fd4b28d9c9cfbdc4f304298_JaffaCakes118
-
Size
9.4MB
-
MD5
bb96315f1fd4b28d9c9cfbdc4f304298
-
SHA1
74a278a4cbb521d51432d5d1009eb4988e28aeb7
-
SHA256
ebc955288c353fd644cf1c0b1cfd0e2a8bfd3b0847017f47376eb7ffb9c5116f
-
SHA512
dadb01ef0f3f63c762647c2e519465a220cc44176e7ea39b2479cbf9e7612c888e7b23de1b703768b1411cd5cee7ce37eb10913019ca22efb2b7a994904577ff
-
SSDEEP
6144:NbTb4dqkVe6ePqzA554I843EeXsqG9noUBAQm+OYAY5/Z2hy6lGFz:x4dqkViqz6Xv9XLkooXQYZSzGFz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb96315f1fd4b28d9c9cfbdc4f304298_JaffaCakes118
Files
-
bb96315f1fd4b28d9c9cfbdc4f304298_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 9.4MB - Virtual size: 9.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ