Static task
static1
Behavioral task
behavioral1
Sample
bba9d12a3c461b297ce6b93cf70e88ac_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bba9d12a3c461b297ce6b93cf70e88ac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bba9d12a3c461b297ce6b93cf70e88ac_JaffaCakes118
-
Size
698KB
-
MD5
bba9d12a3c461b297ce6b93cf70e88ac
-
SHA1
bd175157acf8bff2c355c4f126d4cf7ad5c4bf0c
-
SHA256
6186bfb1a972bd677426c00a9f27c8de4c71d50ad6c62e588cd54e94c5325469
-
SHA512
3c0b58b7dc6511dca6fb590e6f5478ad1ae16c3ef4d93b3b4f3e3f54821036c4298d89fcdf7acbc85eeef844320cff99fbd1acbae7f3b3174dab180ad3abcc4d
-
SSDEEP
12288:2bSJ2Xqt3iXypZGix28uGbxIrlD5eQF1iapt77/4OvsFkkgYLUIxV1k7X:Ar+bZGsmrlD5NF1i2EHGMPkT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bba9d12a3c461b297ce6b93cf70e88ac_JaffaCakes118
Files
-
bba9d12a3c461b297ce6b93cf70e88ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 13KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 905.0MB
.fhgbou Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uiufvj Size: 155KB - Virtual size: 156KB
IMAGE_SCN_MEM_READ
.idata Size: 401B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ